JC
Product
Jboss Core Services
by Redhat · last CVE Apr 23, 2026
On CISA KEVExploited in the wildRansomware-linked
35
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 20Medium 8Low 3
Watch

Add Jboss Core Services to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3541
6.5
2%
Jul 9
A flaw was found in libxml2
Affected: All versions, or not specified
CVE-2019-9516
6.5
56%
Aug 13
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service
Affected: 1.0
CVE-2016-9596
6.5
1%
Aug 16
libxml2, as used in Red Hat JBoss Core Services and when in recovery mode, allows context-dependent attackers to cause a denial of service (stack consumption) via a crafted XML…
Affected: All versions, or not specified
CVE-2016-9598
6.5
1%
Aug 16
libxml2, as used in Red Hat JBoss Core Services, allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted XML…
Affected: All versions, or not specified
CVE-2026-0990
5.9
1%
Jan 15
Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing
Affected: All versions, or not specified
CVE-2021-3537
5.9
4%
May 14
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference
Affected: All versions, or not specified
CVE-2018-17189
5.3
20%
Jan 30
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server…
Affected: 1.0
CVE-2019-0197
4.2
9%
Jun 11
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38
Affected: 1.0
Showing 8