What’s Vulnerable › Products
RedHat Jboss Core Services vulnerabilities
36 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your RedHat Jboss Core Services version is affected
Exploited RedHat Jboss Core Services vulnerabilities
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest RedHat Jboss Core Services vulnerabilities
- CVE-2026-6732 — Libxml2: libxml2: denial of service via crafted xsd-validated document (CVSS 7.5)
- CVE-2026-0992 — Libxml2: libxml2: denial of service via crafted xml catalogs (CVSS 2.9)
- CVE-2026-0990 — Libxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processing (CVSS 5.9)
- CVE-2026-0989 — Libxml2: unbounded relaxng include recursion leading to stack overflow (CVSS 3.7)
- CVE-2025-6170 — Libxml2: stack buffer overflow in xmllint interactive shell command handling (CVSS 2.5)
- CVE-2025-6021 — Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2 (CVSS 7.5)
- CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) (CVSS 9.0) — exploited
- CVE-2021-3541 — (CVSS 6.5)
- CVE-2021-3516 — (CVSS 7.8)
- CVE-2020-25710 — (CVSS 7.5)
- CVE-2021-3517 — Nokogiri contains libxml Out-of-bounds Write vulnerability (CVSS 8.6)
- CVE-2021-3518 — Nokogiri Implements libxml2 version vulnerable to use-after-free (CVSS 8.8)
- CVE-2020-25709 — (CVSS 7.5)
- CVE-2021-3537 — Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing (CVSS 5.9)
- CVE-2019-9518 — Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9517 — Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9516 — Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service (CVSS 6.5)
- CVE-2019-9515 — Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9514 — Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9513 — Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-9511 — Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service (CVSS 7.5)
- CVE-2019-0197 — (CVSS 4.2)
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability (CVSS 7.8) — exploited
- CVE-2018-17189 — (CVSS 5.3)