Known vulnerabilities in jws6-tomcat (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jws6-tomcat (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jws6-tomcat_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
5
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
10.1.49-13.redhat_00011.1.el8jws
10.1.49-13.redhat_00011.1.el9jws
10.1.49-13.redhat_00011.1.el10jws
10.1.49-10.redhat_00008.1.el8jws
10.1.49-10.redhat_00008.1.el9jws
10.1.49-10.redhat_00008.1.el10jws
10.1.36-19.redhat_00018.1.el8jws
10.1.36-19.redhat_00018.1.el9jws
10.1.36-19.redhat_00018.1.el10jws
10.1.36-8.redhat_00009.1.el8jws
10.1.36-8.redhat_00009.1.el9jws
10.1.36-8.redhat_00009.1.el10jws
10.1.36-7.redhat_00008.1.el8jws
10.1.36-7.redhat_00008.1.el9jws
10.1.36-7.redhat_00008.1.el10jws
10.1.36-6.redhat_00007.1.el8jws
10.1.36-6.redhat_00007.1.el9jws
10.1.8-15.redhat_00022.1.el8jws
10.1.8-15.redhat_00022.1.el9jws
10.1.8-7.redhat_00014.1.el8jws
10.1.8-7.redhat_00014.1.el9jws
10.1.8-6.redhat_00013.1.el8jws
10.1.8-6.redhat_00013.1.el9jws
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101814 - Permissions, Privileges, and Access Controls CVE-2024-50379 |
CWE-264 | Medium | 10.1.8-15.redhat_00022.1.el8jws, 10.1.8-15.redhat_00022.1.el9jws | 17.12.2024 |
SB2024121745 SB2024121905 SB2024122055 and 57 more |
||
| #VU87510 - Improper input validation CVE-2024-24549 |
CWE-20 | Medium | 10.1.8-6.redhat_00013.1.el8jws, 10.1.8-6.redhat_00013.1.el9jws | 13.03.2024 |
SB2024031386 SB2024031879 SB2024031880 and 64 more |
||
| #VU87509 - Resource exhaustion CVE-2024-23672 |
CWE-400 | Medium | 10.1.8-7.redhat_00014.1.el8jws, 10.1.8-7.redhat_00014.1.el9jws | 13.03.2024 |
SB2024031386 SB2024032821 SB2024032824 and 49 more |
||
| #VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589 |
CWE-444 | Medium | 10.1.8-6.redhat_00013.1.el8jws, 10.1.8-6.redhat_00013.1.el9jws | 28.11.2023 |
SB2023112846 SB2023121851 SB2023122831 and 78 more |
||
| #VU80089 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-41080 |
CWE-601 | Medium | 10.1.8-6.redhat_00013.1.el8jws, 10.1.8-6.redhat_00013.1.el9jws | 29.08.2023 |
SB2023082924 SB2023100565 SB2023101122 and 51 more |