Known vulnerabilities in JBoss Web Server - page 2

Vendor: Red Hat Inc.

Software: JBoss Web Server

Software CPE: cpe:2.3:a:red_hat:jboss_web_server:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 54

Public exploits: 11

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (54)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-45648	CWE-444	Medium	No	No	5.7.6	10.10.2023	SB2023101084 SB2023101122 SB2023101123 and 48 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	5.7.5	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 655 more
#VU76417 - Allocation of Resources Without Limits or Throttling CVE-2023-28709	CWE-770	Medium	No	No	5.7.4	22.05.2023	SB2023052235 SB2023053003 SB2023053052 and 35 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-28708	CWE-614	Low	No	No	5.7.4	22.03.2023	SB2023032237 SB2023032939 SB2023032945 and 54 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	5.7.4	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU71996 - Double Free CVE-2022-4450	CWE-415	Medium	No	No	5.7.3	07.02.2023	SB2023020742 SB2023020748 SB2023020771 and 180 more
#VU71995 - Use After Free CVE-2023-0215	CWE-416	Medium	No	No	5.7.3	07.02.2023	SB2023020742 SB2023020747 SB2023020748 and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304	CWE-208	Medium	No	No	5.7.3	07.02.2023	SB2023020742 SB2023020748 SB2023020767 and 222 more
#VU71992 - Type confusion CVE-2023-0286	CWE-843	High	No	No	5.7.3	07.02.2023	SB2023020742 SB2023020747 SB2023020748 and 223 more
#VU71753 - Stack-based buffer overflow CVE-2022-28331	CWE-121	High	No	No	5.7.4	02.02.2023	SB2023020208 SB2023022708 SB2023033122 and 5 more
#VU71752 - Integer overflow CVE-2022-24963	CWE-190	High	No	No	5.7.4	02.02.2023	SB2023020209 SB2023020211 SB2023022704 and 19 more
#VU70666 - Improper Control of Generation of Code ('Code Injection') CVE-2022-45143	CWE-94	Medium	No	No	5.7.2	03.01.2023	SB2023010329 SB2023012516 SB2023012606 and 34 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-42252	CWE-444	Medium	No	No	5.7.2	31.10.2022	SB2022103146 SB2022112324 SB2022112533 and 43 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068	CWE-78	Medium	No	No	5.7.1	21.06.2022	SB2022062120 SB2022062125 SB2022062236 and 135 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292	CWE-78	Medium	Available	No	5.7.1	03.05.2022	SB2022050315 SB2022050436 SB2022050503 and 141 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778	CWE-835	Medium	Available	No	5.6.2	15.03.2022	SB2022031520 SB2022031522 SB2022031611 and 238 more
#VU60079 - Permissions, Privileges, and Access Controls CVE-2022-23181	CWE-264	Low	No	No	5.7.0	27.01.2022	SB2022012708 SB2022030854 SB2022041951 and 25 more
#VU58977 - Deserialization of Untrusted Data CVE-2021-4104	CWE-502	Medium	No	No	3.1.14	15.12.2021	SB2021121507 SB2021121647 SB2021121720 and 123 more
#VU56019 - Resource exhaustion CVE-2021-30468	CWE-400	Medium	No	No	5.7.0	20.08.2021	SB2021082016 SB2021101933 SB2022042254 and 8 more
#VU51939 - Improper input validation CVE-2021-22696	CWE-20	Medium	No	No	5.7.0	06.04.2021	SB2021040608 SB2021120219 SB2021120336 and 8 more

Showing elements 21 - 40 out of 54

Known vulnerabilities in JBoss Web Server - page 2

Breakdown by Severity Chart

Vulnerabilities (54)

Please verify you're human