RHSA-2018:2868

Advisory lineage Upstream: 2 Downstream: 0
Published: 13 Sept 2024, 19:49
Last modified:15 May 2026, 10:05

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
3.0 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Sept 2024, 19:49
Published
Vulnerability first disclosed
15 May 2026, 10:05
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat JBoss Web Server 5.0 Service Pack 1 security and bug fix update

CVSS Metrics

  • v3.0CRITICALScore: 9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Systems

  • redhatjws5-tomcat

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-admin-webapps

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-docs-webapp

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-el-3.0-api

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-javadoc

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-jsp-2.3-api

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-jsvc

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-lib

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-selinux

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-servlet-4.0-api

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

  • redhatjws5-tomcat-webapps

    < 0:9.0.7-12.redhat_12.1.el6jws | < 0:9.0.7-12.redhat_12.1.el7jws

References (20)