Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:*:*:*:*:*:*:*

part: a version: 2.0.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Enterprise Web Server (1f399eec-65e0-51b2-90eb-2104a0211341)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25710 vulnerable 2026-06-08 05:22:37.274798 Details available
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.
Published: 2021-05-28T10:20:20.000Z
Updated: 2024-08-04T15:40:36.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19906 vulnerable 2026-06-08 05:13:23.959770 Details available
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
Published: 2019-12-19T17:39:13.000Z
Updated: 2024-08-05T02:32:09.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9788 vulnerable 2026-06-08 05:10:10.576540 Details available
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.
Published: 2017-07-13T16:00:00.000Z
Updated: 2024-09-16T17:53:37.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12617 vulnerable 2026-06-08 05:08:47.344625 Details available
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Published: 2017-10-03T15:00:00.000Z
Updated: 2025-10-21T23:55:32.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12615 vulnerable 2026-06-08 05:08:47.212926 Details available
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
Published: 2017-09-19T13:00:00.000Z
Updated: 2025-10-21T23:55:34.335Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6325 not_vulnerable 2026-06-08 05:07:59.617261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5387 vulnerable 2026-06-08 05:07:56.906369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3110 vulnerable 2026-06-08 05:07:44.479963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2183 vulnerable 2026-06-08 05:07:33.547658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5704 vulnerable 2026-06-08 05:04:53.238574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1976 vulnerable 2026-06-08 05:03:57.671365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.