Known vulnerabilities in php-pear (Red Hat package)

Vendor: Red Hat Inc.
Software: php-pear (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:php-pear_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 3
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php-pear (Red Hat package) php-pear (Red Hat package) is affected by 3 known vulnerabilities: 3 high Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49907 - UNIX Symbolic Link (Symlink) Following
CVE-2020-36193		 CWE-61 High
Available
Exploited
 1.9.4-23.el7_9 18.01.2021 SB2021012112
SB2021012113
SB2021012410
and 20 more
#VU48668 - Improper input validation
CVE-2020-28949		 CWE-20 High
Available
Exploited
 1.9.4-23.el7_9 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 20 more
#VU48669 - Deserialization of Untrusted Data
CVE-2020-28948		 CWE-502 High
Available
No
 1.9.4-23.el7_9 19.11.2020 SB2020112607
SB2020112608
SB2020112609
and 21 more