JW
Product
Jboss Web Server
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 0
Watch
Add Jboss Web Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34486 In wildKEV | 7.5 | Apr 9 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Affected: 7.0.0 |
| CVE-2016-5387 | 8.1 | Jul 19 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: 2.1.0 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 3.0 |
| CVE-2016-2183 | 7.5 | Sep 1 | The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which… Affected: 3.0 |
Showing 4