Red Hat
9 CVEs in CISA KEV — 4 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2015-3246 |
Libuser | — | — | 2026-08-26 | 2026-09-09 | Red Hat libuser contains a race condition vulnerability that allows authenticate | |
CVE-2015-5287 |
Automatic Bug Reporting Tool | — | — | 2026-08-26 | 2026-09-09 | Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vuln | |
CVE-2018-14667 |
JBoss RichFaces Framework | — | — | 2023-09-28 | 2023-10-19 | Red Hat JBoss RichFaces Framework contains an expression language injection vuln | |
CVE-2021-3560 |
Polkit | — | — | 2023-05-12 | 2023-06-02 | Red Hat Polkit contains an incorrect authorization vulnerability through the byp | |
CVE-2021-4034 |
Polkit | — | — | 2022-06-27 | 2022-07-18 | RW | The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulne |
CVE-2010-1428 |
JBoss | — | — | 2022-05-25 | 2022-06-15 | RW | Unauthenticated access to the JBoss Application Server Web Console (/web-console |
CVE-2010-0738 |
JBoss | — | — | 2022-05-25 | 2022-06-15 | RW | The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Applicati |
CVE-2017-12149 |
JBoss Application Server | — | — | 2021-12-10 | 2022-06-10 | RW | The JBoss Application Server, shipped with Red Hat Enterprise Application Platfo |
CVE-2010-1871 |
JBoss Seam 2 | — | — | 2021-12-10 | 2022-06-10 | JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3 |