Known vulnerabilities in vdsm-jsonrpc-java (Red Hat package)

Vendor: Red Hat Inc.
Software: vdsm-jsonrpc-java (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:vdsm-jsonrpc-java_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting vdsm-jsonrpc-java (Red Hat package) vdsm-jsonrpc-java (Red Hat package) is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67131 - Information Exposure Through Log Files
CVE-2022-2806		 CWE-532 Low
No
No
 1.7.2-1.el8ev 08.09.2022 SB2022090832
SB2022090833
SB2022092637
and 1 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 1.7.2-1.el8ev 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU61720 - Improper input validation
CVE-2021-22096		 CWE-20 Medium
No
No
 1.7.2-1.el8ev 29.03.2022 SB2021102810
SB2022032929
SB2022032930
and 15 more
#VU51945 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23358		 CWE-94 High
No
No
 1.7.2-1.el8ev 06.04.2021 SB2021040623
SB2021040624
SB2021050609
and 20 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 1.6.0-1.el8ev 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 1.7.2-1.el8ev 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 1.7.2-1.el8ev 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more