Known vulnerabilities in JBoss Enterprise Application Platform - page 6

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364
CWE-918 Medium
No
No
7.1.8, 7.3.11, 7.4.9 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69919 - Resource Management Errors
CVE-2022-2764
CWE-399 Medium
No
No
7.4.8 06.12.2022 SB2022120605
SB2022120615
SB2022120616
and 7 more
#VU67947 - Resource exhaustion
CVE-2022-1259
CWE-400 Medium
No
No
7.4.7 05.10.2022 SB2022100552
SB2022100557
SB2022100558
and 4 more
#VU67665 - Resource exhaustion
CVE-2022-25857
CWE-400 Medium
No
No
7.4.7 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU66672 - Resource exhaustion
CVE-2022-2053
CWE-400 Medium
No
No
7.4.7 22.08.2022 SB2022082204
SB2022082205
SB2022100557
and 7 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647
CWE-502 Medium
No
No
7.4.6 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU64030 - Resource exhaustion
CVE-2021-44906
CWE-400 High
No
No
7.3.12, 7.4.6 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU64026 - Unchecked Return Value
CVE-2022-1319
CWE-252 Medium
No
No
7.4.5 07.06.2022 SB2022060838
SB2022082205
SB2023011754
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
7.4.6 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
7.4.5 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU60303 - Resource exhaustion
CVE-2022-23913
CWE-400 Medium
No
No
7.4.5 04.02.2022 SB2022020405
SB2022060838
SB2022061803
and 3 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437
CWE-835 Medium
No
No
7.4.5 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59737 - Improper input validation
CVE-2022-21363
CWE-20 Medium
No
No
7.4.5 19.01.2022 SB2022011904
SB2022060838
SB2022100554
and 5 more
#VU58177 - Resource exhaustion
CVE-2021-3629
CWE-400 Medium
No
No
7.4.2, 7.4.7 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735
CWE-79 Low
No
No
7.4.9 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331
CWE-79 Low
No
No
7.4.9 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14041
CWE-79 Low
No
No
7.4.9 18.07.2018 SB2018071803
SB2019031501
SB2023013124
and 8 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042
CWE-79 Low
No
No
7.4.9 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040
CWE-79 Low
No
No
7.4.9 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more
#VU11300 - Resource exhaustion
CVE-2017-18214
CWE-400 Low
No
No
7.4.9 28.03.2018 SB2017090813
SB2022022516
SB2022101031
and 8 more


Showing elements 101 - 120 out of 241