Known vulnerabilities in JBoss Enterprise Application Platform - page 5

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85304 - Excessive Iteration
CVE-2023-4043
CWE-834 Medium
No
No
8.0.1 11.01.2024 SB2024011123
SB2024012646
SB2024020506
and 15 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483
CWE-532 Medium
No
No
7.4.15 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759
CWE-59 Medium
No
No
7.4.15, 8.0.1 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU81930 - Permissions, Privileges, and Access Controls
CVE-2023-4061
CWE-264 Low
No
No
7.4.13 11.10.2023 SB2023101243
SB2023101833
SB2023101834
and 3 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.4.14 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887
CWE-61 Low
No
No
7.4.14, 8.0.1 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136
CWE-1321 High
No
No
7.4.13 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883
CWE-185 Medium
No
No
7.4.13 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
7.4.13 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
7.4.13 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976
CWE-276 Low
No
No
7.4.14 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436
CWE-674 Medium
No
No
7.4.12 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
7.4.14 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
7.4.14 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU74182 - Improper Certificate Validation
CVE-2022-4492
CWE-295 Medium
No
No
7.4.10 30.03.2023 SB2023033003
SB2023033004
SB2023033005
and 13 more
#VU71253 - Improper input validation
CVE-2022-3510
CWE-20 Medium
No
No
7.4.10 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU69823 - Configuration
CVE-2022-1278
CWE-16 Low
No
No
7.4.10 02.12.2022 SB2022120207
SB2023040548
SB2023041912
#VU69670 - Improper input validation
CVE-2022-3509
CWE-20 Medium
No
No
7.4.10 29.11.2022 SB2022111433
SB2022112934
SB2023011787
and 58 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752
CWE-121 Medium
No
No
7.4.10 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877
CWE-502 Medium
No
No
7.4.12 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 81 - 100 out of 241