Known vulnerabilities in JBoss Web Server - page 3

Software CPE: cpe:2.3:a:red_hat:jboss_web_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Web Server JBoss Web Server is affected by 54 known vulnerabilities: 1 critical, 9 high, 37 medium, 7 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302
CWE-502 High
No
No
3.1.14 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305
CWE-89 Medium
No
No
3.1.14 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104
CWE-502 Medium
No
No
3.1.14 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU57389 - Resource exhaustion
CVE-2021-42340
CWE-400 Medium
No
No
5.6.0 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU56634 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41079
CWE-835 Medium
No
No
5.5.1 15.09.2021 SB2021091527
SB2021100721
SB2021101512
and 16 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037
CWE-444 Medium
No
No
5.6.0 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU55417 - Improper Authentication
CVE-2021-30640
CWE-287 Medium
No
No
5.6.0 29.07.2021 SB2021072901
SB2021072902
SB2021081231
and 14 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449
CWE-476 Medium
Available
No
3.1 SP12, 5.4.2 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450
CWE-254 Medium
No
No
3.1 SP12, 5.4.2 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU51014 - Resource Management Errors
CVE-2021-25122
CWE-399 Medium
No
No
5.5.0 01.03.2021 SB2021030115
SB2021031619
SB2021032519
and 23 more
#VU51012 - Deserialization of Untrusted Data
CVE-2021-25329
CWE-502 Medium
No
No
5.5.0 01.03.2021 SB2021030115
SB2021031620
SB2021040723
and 16 more
#VU48543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25638
CWE-89 High
No
No
5.5.0 19.11.2020 SB2020111901
SB2021050201
SB2021063003
and 8 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484
CWE-502 High
Available
No
5.5.0 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more
#VU13993 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8037
CWE-200 Low
No
No
- 24.07.2018 SB2018072404
SB2018081002
SB2018082907
and 8 more


Showing elements 41 - 60 out of 54