[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpSHkXAVmMRaZ8rz_3vXUfwOQiDGnmZorWSe3PWiufzQ":3,"g5a-ex:redhat\u002Fjboss_core_services_httpd@*":63,"g5a-family:redhat\u002Fjboss_core_services_httpd":65},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":40,"seoMetadata":41,"meta":60},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"redhat","jboss_core_services_httpd",3,2,0,"2022-08-26",[14,17,19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.23",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.29",{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.37","Jboss Core Services Httpd by Redhat is a technology product with 3 tracked versions and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":10,"kev_count":11,"has_kev":16},[27,34],{"cveId":28,"description":29,"publishedDate":12,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":16,"epssScore":33},"CVE-2021-3688","A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.",4.8,"v3.1","Medium",0.00568,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":31,"severity":32,"isKev":16,"epssScore":39},"CVE-2020-25680","A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from this vulnerability is to data integrity.","2021-01-07",5.4,0.00331,[],{"title":42,"metaDescription":43,"keywords":44,"structuredData":45},"Jboss Core Services Httpd by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Jboss Core Services Httpd by Redhat covering 3 versions with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Core Services Httpd vulnerabilities, Jboss Core Services Httpd security, Jboss Core Services Httpd CVE, Redhat Jboss Core Services Httpd, Jboss Core Services Httpd threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":46,"@type":47,"name":48,"description":43,"url":49,"manufacturer":50,"applicationCategory":54,"softwareVersion":55,"mainEntity":56},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Core Services Httpd","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_core_services_httpd",{"@type":51,"name":52,"url":53},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","3 versions tracked",{"@type":57,"name":58,"description":59,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Core Services Httpd Security Vulnerabilities","Security vulnerabilities affecting Jboss Core Services Httpd by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":61,"apiVersion":62},"2026-10-28T15:23:03.072Z","3.0",{"rows":64,"total":11,"capped":16,"failed":11},[],[]]