Known vulnerabilities in jws5-tomcat (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jws5-tomcat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jws5-tomcat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
27
Public exploits:
9
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
9.0.87-14.redhat_00013.1.el7jws
9.0.87-14.redhat_00013.1.el8jws
9.0.87-14.redhat_00013.1.el9jws
9.0.87-12.redhat_00011.1.el7jws
9.0.87-12.redhat_00011.1.el8jws
9.0.87-12.redhat_00011.1.el9jws
9.0.87-11.redhat_00010.1.el7jws
9.0.87-11.redhat_00010.1.el8jws
9.0.87-11.redhat_00010.1.el9jws
9.0.87-8.redhat_00008.1.el7jws
9.0.87-8.redhat_00008.1.el8jws
9.0.87-8.redhat_00008.1.el9jws
9.0.87-6.redhat_00006.1.el7jws
9.0.87-6.redhat_00006.1.el8jws
9.0.87-6.redhat_00006.1.el9jws
9.0.87-5.redhat_00005.1.el7jws
9.0.87-5.redhat_00005.1.el8jws
9.0.87-5.redhat_00005.1.el9jws
9.0.87-3.redhat_00003.1.el7jws
9.0.87-3.redhat_00003.1.el8jws
9.0.87-3.redhat_00003.1.el9jws
9.0.62-41.redhat_00020.1.el7jws
9.0.62-41.redhat_00020.1.el8jws
9.0.62-41.redhat_00020.1.el9jws
9.0.62-19.redhat_00017.1.el7jws
9.0.62-19.redhat_00017.1.el8jws
9.0.62-19.redhat_00017.1.el9jws
9.0.62-18.redhat_00016.1.el7jws
9.0.62-18.redhat_00016.1.el8jws
9.0.62-18.redhat_00016.1.el9jws
9.0.62-16.redhat_00014.1.el7jws
9.0.62-16.redhat_00014.1.el8jws
9.0.62-16.redhat_00014.1.el9jws
9.0.62-15.redhat_00013.1.el7jws
9.0.62-15.redhat_00013.1.el8jws
9.0.62-15.redhat_00013.1.el9jws
9.0.62-13.redhat_00011.1.el7jws
9.0.62-13.redhat_00011.1.el8jws
9.0.62-13.redhat_00011.1.el9jws
9.0.36-9.redhat_8.1.el7jws
9.0.36-9.redhat_8.1.el8jws
9.0.30-5.redhat_6.1.el6jws
9.0.30-5.redhat_6.1.el7jws
9.0.30-5.redhat_6.1.el8jws
9.0.30-4.redhat_5.1.el6jws
9.0.30-4.redhat_5.1.el7jws
9.0.30-4.redhat_5.1.el8jws
9.0.30-3.redhat_4.1.el6jws
9.0.30-3.redhat_4.1.el7jws
9.0.30-3.redhat_4.1.el8jws
9.0.50-5.redhat_00007.1.el7jws
9.0.50-5.redhat_00007.1.el8jws
Vulnerabilities (27)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76417 - Allocation of Resources Without Limits or Throttling CVE-2023-28709 |
CWE-770 | Medium | 9.0.62-15.redhat_00013.1.el7jws, 9.0.62-15.redhat_00013.1.el8jws, 9.0.62-15.redhat_00013.1.el9jws | 22.05.2023 |
SB2023052235 SB2023053003 SB2023053052 and 35 more |
||
| #VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-28708 |
CWE-614 | Low | 9.0.62-15.redhat_00013.1.el7jws, 9.0.62-15.redhat_00013.1.el8jws, 9.0.62-15.redhat_00013.1.el9jws | 22.03.2023 |
SB2023032237 SB2023032939 SB2023032945 and 53 more |
||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | 9.0.62-15.redhat_00013.1.el7jws, 9.0.62-15.redhat_00013.1.el8jws, 9.0.62-15.redhat_00013.1.el9jws | 20.02.2023 |
SB2023022046 SB2023022047 SB2023030917 and 203 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 9.0.62-15.redhat_00013.1.el7jws, 9.0.62-15.redhat_00013.1.el8jws, 9.0.62-15.redhat_00013.1.el9jws | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU70666 - Improper Control of Generation of Code ('Code Injection') CVE-2022-45143 |
CWE-94 | Medium | 9.0.62-13.redhat_00011.1.el7jws, 9.0.62-13.redhat_00011.1.el8jws, 9.0.62-13.redhat_00011.1.el9jws | 03.01.2023 |
SB2023010329 SB2023012516 SB2023012606 and 34 more |
||
| #VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-42252 |
CWE-444 | Medium | 9.0.62-13.redhat_00011.1.el7jws, 9.0.62-13.redhat_00011.1.el8jws, 9.0.62-13.redhat_00011.1.el9jws | 31.10.2022 |
SB2022103146 SB2022112324 SB2022112533 and 43 more |
||
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 9.0.50-5.redhat_00007.1.el7jws, 9.0.50-5.redhat_00007.1.el8jws | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
Showing elements 21 - 40 out of 27