Search for packages
| purl | pkg:rpm/redhat/eap7-wildfly-web-console-eap@2.9.17-1.Final_redhat_1.1.ep7?arch=el7 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7ec2-9kmy-77eh
Aliases: CVE-2018-1114 GHSA-gjjx-gqm4-wcgm |
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak. | There are no reported fixed by versions. |
|
VCID-x6g1-qw1v-jbas
Aliases: CVE-2018-7489 GHSA-cggj-fvv3-cqwv |
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:25:58.826522+00:00 | RedHat Importer | Affected by | VCID-x6g1-qw1v-jbas | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-7489.json | 38.0.0 |
| 2026-04-01T14:25:18.497550+00:00 | RedHat Importer | Affected by | VCID-7ec2-9kmy-77eh | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1114.json | 38.0.0 |