JC
Product
Jboss Core Services
On CISA KEVExploited in the wildRansomware-linked
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 20Medium 8Low 3
Watch
Add Jboss Core Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 1.0 |
| CVE-2021-3518 | 8.8 | May 18 | There's a flaw in libxml2 in versions before 2.9.11 Affected: All versions, or not specified |
| CVE-2021-3517 | 8.6 | May 19 | There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11 Affected: All versions, or not specified |
| CVE-2016-5387 | 8.1 | Jul 19 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: 1.0 |
| CVE-2021-3516 | 7.8 | Jun 1 | There's a flaw in libxml2's xmllint in versions before 2.9.11 Affected: All versions, or not specified |
| CVE-2026-6732 | 7.5 | Apr 23 | Libxml2: libxml2: denial of service via crafted xsd-validated document Affected: All versions, or not specified |
| CVE-2025-6021 | 7.5 | Jun 12 | Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 Affected: All versions, or not specified |
| CVE-2020-25710 | 7.5 | May 28 | A flaw was found in OpenLDAP in versions before 2.4.56 Affected: All versions, or not specified |
| CVE-2020-25709 | 7.5 | May 18 | A flaw was found in OpenLDAP Affected: All versions, or not specified |
| CVE-2019-9518 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service Affected: 1.0 |
| CVE-2019-9517 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service Affected: 1.0 |
| CVE-2019-9515 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service Affected: 1.0 |
| CVE-2019-9514 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service Affected: 1.0 |
| CVE-2019-9513 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service Affected: 1.0 |
| CVE-2019-9511 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service Affected: 1.0 |
| CVE-2018-11759 | 7.5 | Oct 31 | The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector 1.2.0 to 1.2.44 did… Affected: All versions, or not specified |
| CVE-2018-1333 | 7.5 | Jun 18 | By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service Affected: 1.0 |
| CVE-2016-8743 | 7.5 | Jul 27 | Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers Affected: 1.0 |
| CVE-2016-3627 | 7.5 | May 17 | The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite… Affected: All versions, or not specified |
| CVE-2017-12613 | 7.1 | Oct 24 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be… Affected: 1.0 |
Showing 20