Known vulnerabilities in JBoss Enterprise Application Platform - page 3

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96051 - Resource exhaustion
CVE-2024-3653
CWE-400 Medium
No
No
7.4.18 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 4 more
#VU92281 - Improper Authorization
CVE-2023-6236
CWE-285 Low
No
No
8.0.2 19.06.2024 SB2024061977
SB2024061978
SB2024061979
and 1 more
#VU92280 - Information Exposure Through Log Files
CVE-2024-1102
CWE-532 Low
No
No
8.0.2 19.06.2024 SB2024061963
SB2024061977
SB2024061978
and 1 more
#VU92251 - Server-Side Request Forgery (SSRF)
CVE-2024-1233
CWE-918 Medium
No
No
7.4.17, 8.0.2 19.06.2024 SB2024061932
SB2024061933
SB2024061934
and 4 more
#VU92202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-1459
CWE-22 Medium
No
No
8.0 18.06.2024 SB2024040460
SB20240618107
SB2024100832
and 1 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88156 - Resource exhaustion
CVE-2023-1973
CWE-400 Medium
No
No
7.4.16, 8.0 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88155 - Improper input validation
CVE-2023-4639
CWE-20 Medium
No
No
7.4.16, 8.0 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88154 - Resource exhaustion
CVE-2024-1635
CWE-400 Medium
No
No
7.4.16 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 8 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
7.4.18 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025
CWE-200 Medium
No
No
7.4.18 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752
CWE-918 Medium
No
No
7.1.8, 7.3.11, 7.4.17 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU85304 - Excessive Iteration
CVE-2023-4043
CWE-834 Medium
No
No
8.0.1 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
7.4.16, 8.0.1 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83849 - Improper Access Control
CVE-2023-4503
CWE-284 Medium
No
No
7.4.14, 8.0.2 04.12.2023 SB2023120447
SB2023120448
SB2023120449
and 4 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483
CWE-532 Medium
No
No
7.4.15 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759
CWE-59 Medium
No
No
7.4.15, 8.0.1 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445
CWE-79 Low
No
No
7.4.17 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 41 - 60 out of 241