Known vulnerabilities in jws5-tomcat (Red Hat package)

Vendor: Red Hat Inc.
Software: jws5-tomcat (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:jws5-tomcat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 27
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting jws5-tomcat (Red Hat package) jws5-tomcat (Red Hat package) is affected by 27 known vulnerabilities: 1 critical, 3 high, 19 medium, 4 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117681 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-55752		 CWE-22 High
Available
No
 9.0.87-14.redhat_00013.1.el7jws, 9.0.87-14.redhat_00013.1.el8jws, 9.0.87-14.redhat_00013.1.el9jws 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 43 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 9.0.87-14.redhat_00013.1.el7jws, 9.0.87-14.redhat_00013.1.el8jws, 9.0.87-14.redhat_00013.1.el9jws 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 9.0.87-14.redhat_00013.1.el7jws, 9.0.87-14.redhat_00013.1.el8jws, 9.0.87-14.redhat_00013.1.el9jws 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 9.0.87-8.redhat_00008.1.el7jws, 9.0.87-8.redhat_00008.1.el8jws, 9.0.87-8.redhat_00008.1.el9jws 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU101814 - Permissions, Privileges, and Access Controls
CVE-2024-50379		 CWE-264 Medium
Available
No
 9.0.87-6.redhat_00006.1.el7jws, 9.0.87-6.redhat_00006.1.el8jws, 9.0.87-6.redhat_00006.1.el9jws, 9.0.87-11.redhat_00010.1.el7jws, 9.0.87-11.redhat_00010.1.el8jws, 9.0.87-11.redhat_00010.1.el9jws 17.12.2024 SB2024121745
SB2024121905
SB2024122055
and 57 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 9.0.87-5.redhat_00005.1.el7jws, 9.0.87-5.redhat_00005.1.el8jws, 9.0.87-5.redhat_00005.1.el9jws 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 9.0.62-41.redhat_00020.1.el7jws, 9.0.62-41.redhat_00020.1.el8jws, 9.0.62-41.redhat_00020.1.el9jws 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU87509 - Resource exhaustion
CVE-2024-23672		 CWE-400 Medium
No
No
 9.0.87-3.redhat_00003.1.el7jws, 9.0.87-3.redhat_00003.1.el8jws, 9.0.87-3.redhat_00003.1.el9jws 13.03.2024 SB2024031386
SB2024032821
SB2024032824
and 49 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 9.0.62-41.redhat_00020.1.el7jws, 9.0.62-41.redhat_00020.1.el8jws, 9.0.62-41.redhat_00020.1.el9jws 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 9.0.62-41.redhat_00020.1.el7jws, 9.0.62-41.redhat_00020.1.el8jws, 9.0.62-41.redhat_00020.1.el9jws 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 9.0.62-18.redhat_00016.1.el7jws, 9.0.62-18.redhat_00016.1.el8jws, 9.0.62-18.redhat_00016.1.el9jws 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81799 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-45648		 CWE-444 Medium
No
No
 9.0.62-18.redhat_00016.1.el7jws, 9.0.62-18.redhat_00016.1.el8jws, 9.0.62-18.redhat_00016.1.el9jws 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 9.0.62-16.redhat_00014.1.el7jws, 9.0.62-16.redhat_00014.1.el8jws, 9.0.62-16.redhat_00014.1.el9jws 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU74148 - Improper Verification of Cryptographic Signature
CVE-2023-0465		 CWE-347 Low
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 100 more
#VU73960 - Resource exhaustion
CVE-2023-0464		 CWE-400 Medium
No
No
 9.0.62-19.redhat_00017.1.el7jws, 9.0.62-19.redhat_00017.1.el8jws, 9.0.62-19.redhat_00017.1.el9jws 22.03.2023 SB2023032241
SB2023033057
SB2023033058
and 100 more


Showing elements 1 - 20 out of 27