Vulnerabilities > Redhat > Jboss Enterprise Application Platform Expansion Pack

DATE CVE VULNERABILITY TITLE RISK
2024-02-06 CVE-2023-4503 Improper Initialization vulnerability in Redhat products
An improper initialization vulnerability was found in Galleon.
network
low complexity
redhat CWE-665
7.5
2023-09-14 CVE-2023-1108 Infinite Loop vulnerability in multiple products
A flaw was found in undertow.
network
low complexity
redhat netapp CWE-835
7.5
2022-09-13 CVE-2022-1278 Insecure Default Initialization of Resource vulnerability in Redhat products
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
network
low complexity
redhat CWE-1188
7.5
2022-03-11 CVE-2022-0853 Memory Leak vulnerability in Redhat products
A flaw was found in JBoss-client.
network
low complexity
redhat CWE-401
5.0
2021-08-05 CVE-2021-3642 Information Exposure Through Discrepancy vulnerability in multiple products
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.
3.5
2021-05-13 CVE-2021-20250 Information Exposure vulnerability in Redhat products
A flaw was found in wildfly.
network
low complexity
redhat CWE-200
4.0