Known vulnerabilities in JBoss Enterprise Application Platform - page 8

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114053 - Improper Resource Shutdown or Release
CVE-2019-19343
CWE-404 Medium
No
No
7.2.4 14.08.2025 SB2021032327
SB2025081409
#VU58178 - Files or Directories Accessible to External Parties
CVE-2021-3717
CWE-552 Low
No
No
7.1.9, 7.4.2 16.11.2021 SB2021111608
SB2021111715
SB2022080830
and 3 more
#VU54909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3536
CWE-79 Medium
No
No
7.3.8 15.07.2021 SB2021071512
SB2021071513
SB2021121542
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
7.3.8 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU51521 - Improper input validation
CVE-2020-35510
CWE-20 Medium
No
No
7.3.6 17.03.2021 SB2021031705
SB2021031707
SB2021032323
and 3 more
#VU51520 - Improper Access Control
CVE-2021-20250
CWE-284 Medium
No
No
7.3.6 17.03.2021 SB2021031704
SB2021031707
SB2021032323
and 1 more
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220
CWE-444 Medium
No
No
7.3.6 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687
CWE-444 Medium
No
No
7.3.6 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU49086 - Comparison using wrong factors
CVE-2020-28052
CWE-1025 High
Available
No
7.1.8, 7.3.6 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908
CWE-276 Low
No
No
7.3.6 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU26053 - Cryptographic Issues
CVE-2019-14887
CWE-310 Low
No
No
7.2.7 13.03.2020 SB2020031304
SB2020031305
SB2020032330
#VU26052 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1745
CWE-22 High
No
No
- 13.03.2020 SB2020031301
SB2020031302
SB2020032334
#VU26050 - Improper input validation
CVE-2019-0210
CWE-20 Medium
No
No
7.2.7 12.03.2020 SB2019102916
SB2020031305
SB2021071503
and 4 more
#VU25598 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-20445
CWE-113 Medium
No
No
7.2.7 26.02.2020 SB2020012928
SB2020022601
SB2020031305
and 33 more
#VU25355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-20444
CWE-444 Medium
No
No
7.2.7 14.02.2020 SB2020012928
SB2020022601
SB2020031305
and 36 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238
CWE-444 Medium
No
No
7.1.8, 7.2.7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more
#VU30430 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14885
CWE-200 Low
No
No
7.2.6 23.01.2020 SB2020012316
SB2020032330
#VU22565 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-0205
CWE-835 Medium
No
No
7.2.7 06.11.2019 SB2019102916
SB2020031305
SB2021071503
and 12 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086
CWE-693 Low
No
No
7.2.7 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU20401 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12400
CWE-611 Medium
No
No
7.2.7 26.08.2019 SB2019082712
SB2020031305
SB2021101936
and 1 more


Showing elements 141 - 160 out of 241