Maven org.jboss.resteasy:resteasy-bom

Name: Maven org.jboss.resteasy:resteasy-bom
Brand: Maven

productUS

pkg:maven/org.jboss.resteasy/resteasy-bom

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high3medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-9606US	high8.1	5.97% (93rd)	—	3.1.2.Final	2018-03-09	< 3.1.2.Final
CVE-2020-10688US	medium6.1	1.39% (72nd)	—	4.5.3.Final	2021-05-27	2 versions
CVE-2020-14326US	high7.5	1.25% (69th)	—	4.5.6.Final	2021-06-02	< 4.5.6.Final
CVE-2021-20293US	medium6.1	0.86% (58th)	—	no fix	2021-06-10	≤ 4.6.0.Final
CVE-2020-25724US	medium4.3	0.63% (50th)	—	2.0-beta-2	2021-05-26	< 2.0-beta-2

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-567Unsynchronized Access to Shared Data in a Multithreaded Context1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.