Red Hat Jboss Core Services Httpd
2 CVEs affecting Red Hat Jboss Core Services Httpd. Latest disclosed: 2022-08-26. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25680 | Medium | 5.4 | 2021-01-07 | A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation… |
CVE-2021-3688 | Medium | 4.8 | 2022-08-26 | A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains… |