redhat jboss core services

Name: redhat jboss core services
Brand: redhat

productUS

cpe:2.3:a:redhat:jboss_core_services:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical20high7medium1low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	= 1.0
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2019-0211US	high7.8OT critical	65.0% (99th)	KEV	no fix	2019-04-08	= 1.0
CVE-2018-11759US	high7.5	90.6% (100th)	Exploit	no fix	2018-10-31	—
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	= 1.0
CVE-2016-3627US	high7.5	7.03% (94th)	Exploit	no fix	2016-05-17	—
CVE-2019-9515US	high7.5	87.3% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9514US	high7.5	82.8% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9513US	high7.5	81.6% (100th)	—	no fix	2019-08-13	= 1.0
CVE-2017-9788US	critical9.1	56.8% (99th)	—	no fix	2017-07-13	= 1.0
CVE-2019-9516US	medium6.5	56.3% (99th)	—	no fix	2019-08-13	= 1.0
CVE-2016-5387US	high8.1	55.7% (99th)	—	no fix	2016-07-19	= 1.0
CVE-2019-9517US	high7.5	27.9% (98th)	—	no fix	2019-08-13	= 1.0
CVE-2019-9518US	high7.5	25.4% (98th)	—	no fix	2019-08-13	= 1.0
CVE-2021-3518US	high8.8	21.9% (98th)	—	no fix	2021-05-18	—
CVE-2017-3167US	critical9.8	20.2% (97th)	—	no fix	2017-06-20	= 1.0
CVE-2018-17189US	medium5.3	20.1% (97th)	—	no fix	2019-01-30	= 1.0
CVE-2021-3517US	high8.6	17.0% (97th)	—	no fix	2021-05-19	—
CVE-2018-1333US	high7.5	16.5% (97th)	—	no fix	2018-06-18	= 1.0
CVE-2018-1312US	critical9.8	15.7% (97th)	—	no fix	2018-03-26	= 1.0
CVE-2016-8743US	high7.5	13.3% (96th)	—	no fix	2017-07-27	= 1.0
CVE-2019-0197US	medium4.2	8.59% (95th)	—	no fix	2019-06-11	= 1.0
CVE-2021-3537US	medium5.9	3.60% (89th)	—	no fix	2021-05-14	—
CVE-2020-25709US	high7.5	3.44% (89th)	—	no fix	2021-05-18	—
CVE-2020-25710US	high7.5	2.73% (86th)	—	no fix	2021-05-28	—
CVE-2021-3541US	medium6.5	2.07% (81st)	—	no fix	2021-07-09	—
CVE-2021-3516US	high7.8	2.04% (81st)	—	no fix	2021-06-01	—
CVE-2017-12613US	high7.1	1.75% (78th)	—	no fix	2017-10-24	2 versions
CVE-2025-6021US	—	1.37% (72nd)	—	no fix	2025-06-12	—
CVE-2016-9598US	medium6.5	1.23% (69th)	—	no fix	2018-08-16	—
CVE-2016-9596US	medium6.5	1.08% (65th)	—	no fix	2018-08-16	—
CVE-2026-0990US	—	0.95% (61st)	—	no fix	2026-01-15	—
CVE-2026-6732US	high7.5	0.63% (50th)	—	no fix	2026-04-23	—
CVE-2026-0989US	—	0.53% (45th)	—	no fix	2026-01-15	—
CVE-2026-0992US	—	0.46% (40th)	—	no fix	2026-01-15	—
CVE-2025-6170US	low2.5	0.32% (25th)	—	no fix	2025-06-16	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption12 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-416Use After Free3 CVEs
CWE-674Uncontrolled Recursion3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-287Improper Authentication2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan