Read the docs

Red Hat

Records7414All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical793CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

9 records in Descision Manager · all components

TI-2022-00759 CVE-2022-0853 · GHSA-f67w-c9w2-5v69

Memory leak in jboss-client

Priority LOW 36

A flaw was found in JBoss-client.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01452 Published 2022-03-11 Partial fix CWE-401
TI-2020-08613 CVE-2020-10714 · GHSA-7fhr-2694-rg79

Session fixation in wildfly-elytron

Priority LOW 36

A flaw was found in WildFly Elytron version 1.11.3.Final and before.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01454 Published 2020-09-23 Partial fix · 1.11.4 CWE-384
TI-2021-03514 CVE-2021-20218 · GHSA-jwh2-ffg4-48xc

Path traversal in fabric8-kubernetes-client

Priority LOW 35

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01312 Published 2021-03-16 Partial fix · 4.7.2, 4.11.2 +2 CWE-22
TI-2019-11044 CVE-2019-14839 · GHSA-rp4p-25j3-mhw4

Information disclosure in Business-central

Priority LOW 35

It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01019 Published 2022-04-01 No fix listed CWE-200
TI-2021-03045 CVE-2021-4178 · GHSA-98g7-rxmf-rrxm

Deserialization of untrusted data in kubernetes-client

Priority LOW 30

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00335 Published 2022-08-24 Partial fix · 5.0.3, 5.1.2 +5 CWE-502
TI-2021-02587 CVE-2021-3642 · GHSA-5499-qjvh-6j7w

Observable discrepancy in wildfly-elytron

Priority LOW 26

A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00846 Published 2021-08-05 Partial fix · 1.10.14, 1.15.5 +1 CWE-203
TI-2021-02490 CVE-2021-3536 · GHSA-v2wx-jj66-2hp7

Cross-site scripting in wildfly

Priority LOW 23

A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00533 Published 2021-05-20 Partial fix · 23.0.2.Final CWE-79
TI-2021-03595 CVE-2021-20306 · GHSA-vjmm-vxxf-qmx4

Incorrect authorization in Business-central

Priority LOW 21

A flaw was found in the BPMN editor in version jBPM 7.51.0.Final.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00655 Published 2021-06-01 Fix deferred CWE-863
TI-2021-02589 CVE-2021-3644 · GHSA-w88m-2936-rmxr

Information disclosure in wildfly-core

Priority LOW 18

A flaw was found in wildfly-core in all versions.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00982 Published 2022-08-26 Partial fix · 16.0.1.Final, 17.0.0.Beta3 CWE-200
Open these records in search →