Known vulnerabilities in JBoss Enterprise Application Platform - page 2

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101867 - Creation of Temporary File With Insecure Permissions
CVE-2024-51127
CWE-378 Low
No
No
7.4.21 19.12.2024 SB2024121931
SB2025011664
SB2025021825
and 4 more
#VU97622 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-8883
CWE-601 Low
No
No
8.0.4, 8.0.4.1 20.09.2024 SB2024092009
SB2024092069
SB2024092070
and 12 more
#VU93103 - Resource exhaustion
CVE-2023-5685
CWE-400 Medium
No
No
7.1.8, 7.3.11 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU71109 - Out-of-bounds write
CVE-2022-45693
CWE-787 Medium
No
No
7.1.9, 7.3.12, 7.4.9 11.01.2023 SB2023011159
SB2023011160
SB2023013112
and 45 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
7.1.9, 7.3.12, 7.4.10 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
7.1.9, 7.3.12, 7.4.10 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
7.1.9, 7.3.12, 7.4.9 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
7.1.9, 7.3.12, 7.4.9 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
7.1.9, 7.3.12 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
7.3.12, 7.4.6 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 53 more
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392
CWE-502 Critical
Available
No
7.3.12, 7.4.5 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
7.1.9, 7.3.12, 7.4.4 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
7.1.9, 7.3.12, 7.4.4 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more
#VU58178 - Files or Directories Accessible to External Parties
CVE-2021-3717
CWE-552 Low
No
No
7.1.9, 7.4.2 16.11.2021 SB2021111608
SB2021111715
SB2022080830
and 3 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673
CWE-502 High
Available
No
7.1.9 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU26493 - Deserialization of Untrusted Data
CVE-2020-10672
CWE-502 High
No
No
7.1.9 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 16 more
#VU25832 - Deserialization of Untrusted Data
CVE-2020-9548
CWE-502 High
Available
No
7.1.9 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 14 more
#VU25831 - Deserialization of Untrusted Data
CVE-2020-9547
CWE-502 High
Available
No
7.1.9 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 13 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546
CWE-502 High
No
No
7.1.9 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840
CWE-94 Medium
Available
No
7.1.9 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more


Showing elements 21 - 40 out of 241