Known vulnerabilities in JBoss Web Server

Software CPE: cpe:2.3:a:red_hat:jboss_web_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Web Server JBoss Web Server is affected by 54 known vulnerabilities: 1 critical, 9 high, 37 medium, 7 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752
CWE-22 High
Available
No
5.8.6 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU114024 - Resource exhaustion
CVE-2025-48989
CWE-400 Medium
No
No
5.8.6 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU107995 - Improper input validation
CVE-2025-31651
CWE-20 Medium
Available
No
5.8.6 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105485 - Improper input validation
CVE-2025-24813
CWE-20 Critical
Available
Exploited
5.8.3, 6.1.0 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379
CWE-264 Medium
Available
No
5.8.2, 5.8.4, 6.0.5 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU101813 - Resource exhaustion
CVE-2024-54677
CWE-400 Medium
No
No
6.1.0 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 13 more
#VU100588 - Improper Authentication
CVE-2024-52316
CWE-287 Low
No
No
6.1.0 18.11.2024 SB2024111823
SB2024112550
SB2024112832
and 36 more
#VU87510 - Improper input validation
CVE-2024-24549
CWE-20 Medium
Available
No
5.7.8, 6.0.1 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672
CWE-400 Medium
No
No
5.8.0, 6.0.2 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589
CWE-444 Medium
No
No
5.7.8, 6.0.1 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82894 - Resource Management Errors
CVE-2023-5678
CWE-399 Medium
No
No
5.7.8, 6.0.1 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81803 - Exposed Dangerous Method or Function
CVE-2023-42794
CWE-749 Medium
No
No
5.7.7 10.10.2023 SB2023101084
SB2023101286
SB2023111528
and 22 more
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
5.7.6 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080
CWE-601 Medium
Available
No
5.7.7, 6.0.1 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
5.7.7 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446
CWE-399 Medium
No
No
5.7.7 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
5.7.7 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466
CWE-254 Low
No
No
5.7.7 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465
CWE-347 Low
No
No
5.7.7 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464
CWE-400 Medium
No
No
5.7.7 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more


Showing elements 1 - 20 out of 54