Known vulnerabilities in jws5-tomcat-native (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jws5-tomcat-native (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jws5-tomcat-native_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
21
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
1.2.31-17.redhat_17.el7jws
1.2.31-17.redhat_17.el8jws
1.2.31-17.redhat_17.el9jws
1.2.31-16.redhat_16.el7jws
1.2.31-16.redhat_16.el8jws
1.2.31-16.redhat_16.el9jws
1.2.31-15.redhat_15.el7jws
1.2.31-15.redhat_15.el8jws
1.2.31-15.redhat_15.el9jws
1.2.31-14.redhat_14.el7jws
1.2.31-14.redhat_14.el8jws
1.2.31-14.redhat_14.el9jws
1.2.25-3.redhat_3.el7jws
1.2.25-3.redhat_3.el8jws
1.2.23-5.redhat_5.el6jws
1.2.23-5.redhat_5.el7jws
1.2.23-5.redhat_5.el8jws
1.2.23-4.redhat_4.el6jws
1.2.23-4.redhat_4.el7jws
1.2.23-4.redhat_4.el8jws
1.2.31-11.redhat_11.el7jws
1.2.31-11.redhat_11.el8jws
1.2.31-11.redhat_11.el9jws
1.2.30-4.redhat_4.el7jws
1.2.30-4.redhat_4.el8jws
Vulnerabilities (21)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87510 - Improper input validation CVE-2024-24549 |
CWE-20 | Medium | 1.2.31-17.redhat_17.el7jws, 1.2.31-17.redhat_17.el8jws, 1.2.31-17.redhat_17.el9jws | 13.03.2024 |
SB2024031386 SB2024031879 SB2024031880 and 64 more |
||
| #VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589 |
CWE-444 | Medium | 1.2.31-17.redhat_17.el7jws, 1.2.31-17.redhat_17.el8jws, 1.2.31-17.redhat_17.el9jws | 28.11.2023 |
SB2023112846 SB2023121851 SB2023122831 and 78 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 1.2.31-17.redhat_17.el7jws, 1.2.31-17.redhat_17.el8jws, 1.2.31-17.redhat_17.el9jws | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU80089 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-41080 |
CWE-601 | Medium | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 29.08.2023 |
SB2023082924 SB2023100565 SB2023101122 and 51 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU76651 - Resource Management Errors CVE-2023-2650 |
CWE-399 | Medium | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 30.05.2023 |
SB2023053040 SB2023053044 SB2023053045 and 131 more |
||
| #VU76417 - Allocation of Resources Without Limits or Throttling CVE-2023-28709 |
CWE-770 | Medium | 1.2.31-15.redhat_15.el7jws, 1.2.31-15.redhat_15.el8jws, 1.2.31-15.redhat_15.el9jws | 22.05.2023 |
SB2023052235 SB2023053003 SB2023053052 and 35 more |
||
| #VU74149 - Security Features CVE-2023-0466 |
CWE-254 | Low | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 86 more |
||
| #VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465 |
CWE-347 | Low | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 100 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 1.2.31-16.redhat_16.el7jws, 1.2.31-16.redhat_16.el8jws, 1.2.31-16.redhat_16.el9jws | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-28708 |
CWE-614 | Low | 1.2.31-15.redhat_15.el7jws, 1.2.31-15.redhat_15.el8jws, 1.2.31-15.redhat_15.el9jws | 22.03.2023 |
SB2023032237 SB2023032939 SB2023032945 and 53 more |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 1.2.31-15.redhat_15.el7jws, 1.2.31-15.redhat_15.el8jws, 1.2.31-15.redhat_15.el9jws | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 203 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 1.2.31-14.redhat_14.el7jws, 1.2.31-14.redhat_14.el8jws, 1.2.31-14.redhat_14.el9jws | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 1.2.31-14.redhat_14.el7jws, 1.2.31-14.redhat_14.el8jws, 1.2.31-14.redhat_14.el9jws | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 1.2.31-14.redhat_14.el7jws, 1.2.31-14.redhat_14.el8jws, 1.2.31-14.redhat_14.el9jws | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 1.2.31-14.redhat_14.el7jws, 1.2.31-14.redhat_14.el8jws, 1.2.31-14.redhat_14.el9jws | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 1.2.31-15.redhat_15.el7jws, 1.2.31-15.redhat_15.el8jws, 1.2.31-15.redhat_15.el9jws | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | 1.2.31-11.redhat_11.el7jws, 1.2.31-11.redhat_11.el8jws, 1.2.31-11.redhat_11.el9jws | 21.06.2022 |
SB2022062120 SB2022062125 SB2022062236 and 135 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 1.2.31-11.redhat_11.el7jws, 1.2.31-11.redhat_11.el8jws, 1.2.31-11.redhat_11.el9jws | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
Showing elements 1 - 20 out of 21