Known vulnerabilities in JBoss Enterprise Application Platform - page 9

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30430 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14885
CWE-200 Low
No
No
7.2.6 23.01.2020 SB2020012316
SB2020032330
#VU34956 - Improper Privilege Management
CVE-2012-2312
CWE-269 Low
No
No
- 18.12.2019 SB2019121848
#VU30555 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-6495
CWE-79 Low
No
No
6.1.1 11.12.2019 SB2019121129
#VU35944 - Permissions, Privileges, and Access Controls
CVE-2019-3894
CWE-264 High
No
No
- 03.05.2019 SB2018062717
SB2019050926
#VU36708 - Improper input validation
CVE-2016-7066
CWE-20 Low
No
No
7.1.0 11.09.2018 SB2018091116
#VU36815 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-7464
CWE-611 High
No
No
- 27.07.2018 SB2017082209
#VU37000 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-7465
CWE-94 High
No
No
- 27.06.2018 SB2018062717
#VU37138 - Resource exhaustion
CVE-2016-8627
CWE-400 Medium
No
No
- 11.05.2018 SB2018051129
#VU37460 - Deserialization of Untrusted Data
CVE-2016-9585
CWE-502 Medium
No
No
- 09.03.2018 SB2016101312
#VU37591 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1048
CWE-22 Medium
No
No
- 25.01.2018 SB2018012536
SB2018031234
#VU38291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7561
CWE-444 Medium
No
No
- 13.09.2017 SB2017091336
SB2018031234
#VU38442 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6311
CWE-200 Medium
No
No
- 22.08.2017 SB2017082209
#VU38883 - Deserialization of Untrusted Data
CVE-2016-3690
CWE-502 High
No
No
- 08.06.2017 SB2017060819
#VU38972 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-7503
CWE-611 High
No
No
- 18.05.2017 SB2017051817
#VU40073 - Deserialization of Untrusted Data
CVE-2016-7065
CWE-502 High
Available
No
- 13.10.2016 SB2016101312
#VU40893 - Permissions, Privileges, and Access Controls
CVE-2014-7849
CWE-264 Low
No
No
- 13.02.2015 SB2015021305
#VU41391 - Permissions, Privileges, and Access Controls
CVE-2014-3464
CWE-264 Low
No
No
- 19.08.2014 SB2014081901
#VU41392 - Permissions, Privileges, and Access Controls
CVE-2014-3472
CWE-264 Low
No
No
- 19.08.2014 SB2014081901
#VU41462 - Exposure of sensitive information to an unauthorized actor
CVE-2014-3530
CWE-200 Medium
No
No
- 22.07.2014 SB2014072213
#VU41847 - Permissions, Privileges, and Access Controls
CVE-2014-0093
CWE-264 Medium
No
No
- 03.04.2014 SB2014040302


Showing elements 161 - 180 out of 241