Red Hat JBoss Data Virtualization vulnerabilities

5 CVEs affecting Red Hat JBoss Data Virtualization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-4104, published 2021-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7501, published 2017-11-09. Critical severity, CVSS 9.8. EPSS: 85.6% chance of exploitation in the next 30 days. Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service…
CVE-2021-4104, published 2021-12-14. High severity, CVSS 7.5. EPSS: 80.6% chance of exploitation in the next 30 days. JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and…
CVE-2020-14340, published 2021-06-02. Medium severity, CVSS 5.9. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial…
CVE-2014-0171, published 2015-01-15. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows remote attackers to read arbitrary files via a…
CVE-2014-0170, published 2014-09-30. Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days. Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an…