Known vulnerabilities in php54-php (Red Hat package)

Vendor: Red Hat Inc.
Software: php54-php (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:php54-php_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php54-php (Red Hat package) php54-php (Red Hat package) is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU346 - Server-Side Request Forgery (SSRF)
CVE-2016-5385		 CWE-918 High
No
No
 5.4.40-4.el6, 5.4.40-4.el7 27.08.2016 SB2016071801
SB2016081103
SB2016081104
and 11 more
#VU194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5385		 CWE-79 High
No
No
 5.4.40-4.el6, 5.4.40-4.el7 22.07.2016 SB2016072001
SB2016072206
SB2016081103
and 14 more