Known vulnerabilities in JBoss Enterprise Application Platform - page 8

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302
CWE-502 High
No
No
7.4.4 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714
CWE-835 Medium
No
No
7.4.2 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56965 - Exposure of sensitive information to an unauthorized actor
CVE-2021-20289
CWE-200 Low
No
No
7.4.2 30.09.2021 SB2021093015
SB2021093016
SB2021111715
and 5 more
#VU56931 - Memory corruption
CVE-2021-30129
CWE-119 Medium
No
No
7.4.2 29.09.2021 SB2021092916
SB2021092917
SB2021111715
and 15 more
#VU54909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3536
CWE-79 Medium
No
No
7.3.8 15.07.2021 SB2021071512
SB2021071513
SB2021121542
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
7.3.8 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 33 more
#VU51521 - Improper input validation
CVE-2020-35510
CWE-20 Medium
No
No
7.3.6 17.03.2021 SB2021031705
SB2021031707
SB2021032323
and 3 more
#VU51520 - Improper Access Control
CVE-2021-20250
CWE-284 Medium
No
No
7.3.6 17.03.2021 SB2021031704
SB2021031707
SB2021032323
and 1 more
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220
CWE-444 Medium
No
No
7.3.6 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687
CWE-444 Medium
No
No
7.3.6 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU50139 - Incorrect Default Permissions
CVE-2020-8908
CWE-276 Low
No
No
7.3.6 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU41493 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3481
CWE-200 Medium
No
No
- 07.07.2014 SB2014040302
#VU42006 - Cryptographic Issues
CVE-2014-0058
CWE-310 Low
No
No
- 26.02.2014 SB2014022601
#VU42083 - Permissions, Privileges, and Access Controls
CVE-2012-3427
CWE-264 Low
No
No
- 02.02.2014 SB2014020202
#VU42525 - Cryptographic Issues
CVE-2013-1921
CWE-310 Low
No
No
- 28.09.2013 SB2013092803
#VU42662 - Improper Access Control
CVE-2013-4213
CWE-284 Medium
No
No
- 16.08.2013 SB2013081602
#VU42663 - Configuration
CVE-2013-4128
CWE-16 Medium
No
No
- 16.08.2013 SB2013081602
#VU43213 - Permissions, Privileges, and Access Controls
CVE-2012-4549
CWE-264 Medium
No
No
- 05.01.2013 SB2013010502
#VU43214 - Permissions, Privileges, and Access Controls
CVE-2012-4550
CWE-264 Medium
No
No
- 05.01.2013 SB2013010503
#VU44355 - Permissions, Privileges, and Access Controls
CVE-2011-4608
CWE-264 Medium
No
No
- 27.01.2012 SB2012012703


Showing elements 141 - 160 out of 241