| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
|
|
|
High
|
|
Jboss EAP Missing Authorization Vulnerability (CVE-2019-10184)
|
|
|
High
|
|
Jboss EAP Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2022-0853)
|
|
|
High
|
|
Jboss EAP Observable Discrepancy Vulnerability (CVE-2022-3143)
|
|
|
High
|
|
Jboss EAP Other Vulnerability (CVE-2014-3490)
|
|
|
High
|
|
Jboss EAP Other Vulnerability (CVE-2019-9513)
|
|
|
High
|
|
Jboss EAP Out-of-bounds Read Vulnerability (CVE-2019-0210)
|
|
|
High
|
|
Jboss EAP Permission Issues Vulnerability (CVE-2016-7066)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4605)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5406)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8656)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
|
|
|
High
|
|
Jboss EAP Reachable Assertion Vulnerability (CVE-2020-25710)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2017-12174)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14384)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-25644)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
|
|
|
High
|
|
Jboss EAP Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12617)
|
|
|
High
|
|
Jboss EAP Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-1000180)
|
|
|
High
|
|
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)
|
|
|
High
|
|
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2019-10174)
|
|
|
High
|
|
Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2018-1000632)
|
|
|
High
|
|
JBoss HttpAdaptor JMXInvokerServlet
|
|
|
High
|
|
JBoss InvokerTransformer Remote Code Execution
|
|
|
High
|
|
JBoss JMX Console Unrestricted Access
|
|
|
High
|
|
JBoss JMX management console
|
|
|
High
|
|
JBoss Seam framework remote code execution
|
|
|
High
|
|
JBoss Seam remoting vulnerabilities
|
|
|
High
|
|
JBoss ServerInfo MBean
|
|
|
High
|
|
JBoss Server MBean
|
|
|
High
|
|
JBoss Web Console JMX Invoker
|
|
|
High
|
|
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27900)
|
|
|
High
|
|
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27901)
|
|
|
High
|
|
Jenkins Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2017-1000503)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-7537)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000356)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000504)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10353)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10384)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-2160)
|
|
|
High
|
|
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35141)
|
|
|
High
|
|
Jenkins CVE-2013-0329 Vulnerability (CVE-2013-0329)
|
|
|
High
|
|
Jenkins CVE-2014-2063 Vulnerability (CVE-2014-2063)
|
|
|
High
|
|
Jenkins CVE-2015-7538 Vulnerability (CVE-2015-7538)
|
|
|
High
|
|
Jenkins CVE-2023-43498 Vulnerability (CVE-2023-43498)
|
|
|
High
|
|
Jenkins CVE-2023-44487 Vulnerability (CVE-2023-44487)
|
|
|
High
|
|
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-2608)
|
|
|
High
|
|
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2021-21604)
|
|
|
High
|
|
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2022-0538)
|
|
|
High
|
|
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1000410)
|
|
|
High
|
|
Jenkins Git Plugin missing permission check (CVE-2022-36883)
|
|
|
High
|
|
Jenkins Improper Access Control Vulnerability (CVE-2015-5325)
|
|
|
High
|
|
Jenkins Improper Authentication Vulnerability (CVE-2017-1000354)
|
|
|
High
|
|
Jenkins Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2024-43044)
|
|
|
High
|
|
Jenkins Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3666)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2012-4438)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2016-0792)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2017-1000391)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2017-1000394)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2018-1999001)
|
|
|
High
|
|
Jenkins Improper Input Validation Vulnerability (CVE-2018-1999002)
|
|
|
High
|
|
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000194)
|
|
|
High
|
|
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000863)
|
|
|
High
|
|
Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-21605)
|
|
|
High
|
|
Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21686)
|
|
|
High
|
|
Jenkins Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-1000393)
|
|
|
High
|
