Known vulnerabilities in JBoss Enterprise Web Server 5

Vendor: Red Hat Inc.

Software: JBoss Enterprise Web Server

Version: 5

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_web_server:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 9

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU29333 - Resource Management Errors CVE-2020-11996	CWE-399	Medium	Public exploit available	No	5.4.0	27.06.2020	SB2020062701 SB2020062802 SB2020072414 and 6 more
#VU20992 - Resource Management Errors CVE-2019-10072	CWE-399	Medium	No	No	5.2.0	10.09.2019	SB2019091025 SB2019112011 SB2019112012 and 14 more
#VU18638 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0221	CWE-79	Low	Public exploit available	No	5.2.0	30.05.2019	SB2019041101 SB2019070106 SB2019072501 and 13 more
#VU18067 - Resource exhaustion CVE-2019-0199	CWE-400	Medium	No	No	5.2.0	25.03.2019	SB2019020812 SB2019052003 SB2019070106 and 10 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm CVE-2019-1559	CWE-327	Low	No	No	5.2.0	26.02.2019	SB2019022607 SB2019022802 SB2019022809 and 50 more
#VU15723 - Information Exposure Through Timing Discrepancy CVE-2018-5407	CWE-208	Low	Public exploit available	No	5.2.0	06.11.2018	SB2018110602 SB2018111301 SB2018112201 and 30 more
#VU13992 - Permissions, Privileges, and Access Controls CVE-2018-8034	CWE-264	Low	No	No	-	25.06.2018	SB2018072404 SB2018081002 SB2018081005 and 13 more
#VU12798 - Exposure of sensitive information to an unauthorized actor CVE-2018-8014	CWE-200	Low	No	No	-	17.05.2018	SB2018051706 SB2018081002 SB2018081005 and 12 more
#VU13986 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-1336	CWE-835	Medium	No	No	-	16.05.2018	SB2018051612 SB2018080607 SB2018080608 and 12 more