RHSA-2023:0552: eap7-apache-sshd Red Hat

Published

Published 27-09-2024Last modified 13-10-2026

Vulnerability summary

RHSA-2023:0552 is a critical (CVSS 9.8) vulnerability in eap7-apache-sshd Red Hat.

Priority

Prioritisesevere

Severe, CVSS 9.8 (OSV · Red hat); no exploitation reported by the 5 checked sources; EPSS not yet published

Source freshness unavailable

How is this decided?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 19 · Downstream 0

CVE-2015-9251 CVE-2016-10735 CVE-2017-18214 CVE-2018-14040 CVE-2018-14041 CVE-2018-14042+13 more

Timeline

27-09-2024
PublishedVulnerability first disclosed.
13-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat49 products

eap7-apache-sshd< 0:2.9.2-1.redhat_00001.1.el7eap
eap7-elytron-web< 0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-hal-console< 0:3.3.16-1.Final_redhat_00001.1.el7eap
eap7-hibernate-search< 0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jgroups< 0:5.10.13-3.Final_redhat_00001.1.el7eap

eap7-hibernate-search-backend-jms< 0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-engine< 0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-orm< 0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-serialization-avro< 0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-ironjacamar< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator< 0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-core< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-databind< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-base< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8< 0:2.12.7-1.redhat_00003.1.el7eap
eap7-javaee-security-soteria< 0:1.0.1-3.redhat_00003.1.el7eap
eap7-javaee-security-soteria-enterprise< 0:1.0.1-3.redhat_00003.1.el7eap
eap7-jboss-ejb-client< 0:4.0.49-1.Final_redhat_00001.1.el7eap
eap7-jboss-jsf-api_2.3_spec< 0:3.0.0-6.SP07_redhat_00001.1.el7eap
eap7-jboss-jsp-api_2.3_spec< 0:2.0.0-3.Final_redhat_00001.1.el7eap
eap7-jboss-remoting< 0:5.0.27-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration< 0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-cli< 0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-core< 0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jettison< 0:1.5.2-1.redhat_00002.1.el7eap
eap7-undertow< 0:2.2.22-1.SP3_redhat_00001.1.el7eap
eap7-undertow-server< 0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-wildfly< 0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-elytron< 0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool< 0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11< 0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8< 0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs< 0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-modules< 0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-woodstox-core< 0:6.4.0-1.redhat_00001.1.el7eap

Show all 49

1 vendor · 49 products

References

109 links

Show all 100 references

bugzilla.redhat.com/show_bug.cgi?id=1686454REPORT
bugzilla.redhat.com/show_bug.cgi?id=1701972REPORT
bugzilla.redhat.com/show_bug.cgi?id=1828406REPORT
bugzilla.redhat.com/show_bug.cgi?id=1850004REPORT
bugzilla.redhat.com/show_bug.cgi?id=2124682REPORT
bugzilla.redhat.com/show_bug.cgi?id=2134291REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135244REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135247REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135770REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135771REPORT
bugzilla.redhat.com/show_bug.cgi?id=2145194REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155682REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155970REPORT
issues.redhat.com/browse/JBEAP-23864ARTICLE
issues.redhat.com/browse/JBEAP-23865ARTICLE
issues.redhat.com/browse/JBEAP-23866ARTICLE
issues.redhat.com/browse/JBEAP-23926ARTICLE
issues.redhat.com/browse/JBEAP-24055ARTICLE
issues.redhat.com/browse/JBEAP-24081ARTICLE
issues.redhat.com/browse/JBEAP-24095ARTICLE
issues.redhat.com/browse/JBEAP-24100ARTICLE
issues.redhat.com/browse/JBEAP-24127ARTICLE
issues.redhat.com/browse/JBEAP-24128ARTICLE
issues.redhat.com/browse/JBEAP-24132ARTICLE
issues.redhat.com/browse/JBEAP-24147ARTICLE
issues.redhat.com/browse/JBEAP-24167ARTICLE
issues.redhat.com/browse/JBEAP-24191ARTICLE
issues.redhat.com/browse/JBEAP-24195ARTICLE
issues.redhat.com/browse/JBEAP-24207ARTICLE
issues.redhat.com/browse/JBEAP-24248ARTICLE
issues.redhat.com/browse/JBEAP-24426ARTICLE
issues.redhat.com/browse/JBEAP-24427ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0552.jsonAdvisory
access.redhat.com/security/cve/CVE-2015-9251REPORT
www.cve.org/CVERecord?id=CVE-2015-9251Advisory
nvd.nist.gov/vuln/detail/CVE-2015-9251Advisory
access.redhat.com/security/cve/CVE-2016-10735REPORT
www.cve.org/CVERecord?id=CVE-2016-10735Advisory
nvd.nist.gov/vuln/detail/CVE-2016-10735Advisory
access.redhat.com/security/cve/CVE-2017-18214REPORT
www.cve.org/CVERecord?id=CVE-2017-18214Advisory
nvd.nist.gov/vuln/detail/CVE-2017-18214Advisory
access.redhat.com/security/cve/CVE-2018-14040REPORT
www.cve.org/CVERecord?id=CVE-2018-14040Advisory
nvd.nist.gov/vuln/detail/CVE-2018-14040Advisory
access.redhat.com/security/cve/CVE-2018-14041REPORT
www.cve.org/CVERecord?id=CVE-2018-14041Advisory
nvd.nist.gov/vuln/detail/CVE-2018-14041Advisory
access.redhat.com/security/cve/CVE-2018-14042REPORT
www.cve.org/CVERecord?id=CVE-2018-14042Advisory
nvd.nist.gov/vuln/detail/CVE-2018-14042Advisory
access.redhat.com/security/cve/CVE-2019-8331REPORT
www.cve.org/CVERecord?id=CVE-2019-8331Advisory
nvd.nist.gov/vuln/detail/CVE-2019-8331Advisory
access.redhat.com/security/cve/CVE-2019-11358REPORT
www.cve.org/CVERecord?id=CVE-2019-11358Advisory
nvd.nist.gov/vuln/detail/CVE-2019-11358Advisory
blog.jquery.com/2019/04/10/jquery-3-4-0-released/ARTICLE
www.drupal.org/sa-core-2019-006ARTICLE
access.redhat.com/security/cve/CVE-2020-11022REPORT
www.cve.org/CVERecord?id=CVE-2020-11022Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11022Advisory
github.com/advisories/GHSA-gxr4-xjj5-5px2Advisory
access.redhat.com/security/cve/CVE-2020-11023REPORT
www.cve.org/CVERecord?id=CVE-2020-11023Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11023Advisory
blog.jquery.com/2020/04/10/jquery-3-5-0-released/ARTICLE
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLE
access.redhat.com/security/cve/CVE-2022-3143REPORT
www.cve.org/CVERecord?id=CVE-2022-3143Advisory
nvd.nist.gov/vuln/detail/CVE-2022-3143Advisory
access.redhat.com/security/cve/CVE-2022-40149REPORT
www.cve.org/CVERecord?id=CVE-2022-40149Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40149Advisory
github.com/jettison-json/jettison/releases/tag/jettison-1.5.1ARTICLE
access.redhat.com/security/cve/CVE-2022-40150REPORT
www.cve.org/CVERecord?id=CVE-2022-40150Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40150Advisory
access.redhat.com/security/cve/CVE-2022-40152REPORT
www.cve.org/CVERecord?id=CVE-2022-40152Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40152Advisory
github.com/advisories/GHSA-3f7h-mf4q-vrm4Advisory
access.redhat.com/security/cve/CVE-2022-42003REPORT
www.cve.org/CVERecord?id=CVE-2022-42003Advisory
nvd.nist.gov/vuln/detail/CVE-2022-42003Advisory
access.redhat.com/security/cve/CVE-2022-42004REPORT
www.cve.org/CVERecord?id=CVE-2022-42004Advisory
nvd.nist.gov/vuln/detail/CVE-2022-42004Advisory
access.redhat.com/security/cve/CVE-2022-45047REPORT
www.cve.org/CVERecord?id=CVE-2022-45047Advisory

Showing 100 of 109.