CVE-2021-3688
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not...
4.8 Medium
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
0.57%Down 0.3 points since Aug 27, 2022
What each source reports
NVD Score used
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
- Record
CVE-2021-3688- CVSS 3.1
- 4.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-200, CWE-22
- Updated
- 2026-11-02
CVE List No score
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
- Record
CVE-2021-3688- Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2021-26976 No score
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
- Record
EUVD-2021-26976- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f3rq-463v-2j36
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not...
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s). This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. The highest threat from this vulnerability is to data confidentiality and integrity.
- Record
GHSA-f3rq-463v-2j36- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-22, CWE-200
- Updated
- 2026-11-02
OSVRHSA-2021:4614
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP10 security update
- Record
RHSA-2021:4614- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
jbcs-httpd24-aprRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.3-107.jbcs.el7 | 0:1.6.3-107.jbcs.el7 |
jbcs-httpd24-apr-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.3-107.jbcs.el7 | 0:1.6.3-107.jbcs.el7 |
jbcs-httpd24-apr-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.3-107.jbcs.el7 | 0:1.6.3-107.jbcs.el7 |
jbcs-httpd24-apr-utilRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-ldapRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-mysqlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-nssRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-odbcRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
Show 108 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jbcs-httpd24-apr-util-opensslRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-pgsqlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-apr-util-sqliteRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.6.1-84.jbcs.el7 | 0:1.6.1-84.jbcs.el7 |
jbcs-httpd24-curlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:7.78.0-2.jbcs.el7 | 0:7.78.0-2.jbcs.el7 |
jbcs-httpd24-curl-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:7.78.0-2.jbcs.el7 | 0:7.78.0-2.jbcs.el7 |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-libcurlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:7.78.0-2.jbcs.el7 | 0:7.78.0-2.jbcs.el7 |
jbcs-httpd24-libcurl-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:7.78.0-2.jbcs.el7 | 0:7.78.0-2.jbcs.el7 |
jbcs-httpd24-mod_cluster-nativeRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.3.16-9.Final_redhat_2.jbcs.el7 | 0:1.3.16-9.Final_redhat_2.jbcs.el7 |
jbcs-httpd24-mod_cluster-native-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.3.16-9.Final_redhat_2.jbcs.el7 | 0:1.3.16-9.Final_redhat_2.jbcs.el7 |
jbcs-httpd24-mod_http2Red Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.15.7-21.jbcs.el7 | 0:1.15.7-21.jbcs.el7 |
jbcs-httpd24-mod_http2-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.15.7-21.jbcs.el7 | 0:1.15.7-21.jbcs.el7 |
jbcs-httpd24-mod_jkRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.jbcs.el7 | 0:1.2.48-20.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-ap24Red Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.jbcs.el7 | 0:1.2.48-20.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.jbcs.el7 | 0:1.2.48-20.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-manualRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.jbcs.el7 | 0:1.2.48-20.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-mod_mdRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:2.0.8-40.jbcs.el7 | 1:2.0.8-40.jbcs.el7 |
jbcs-httpd24-mod_md-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:2.0.8-40.jbcs.el7 | 1:2.0.8-40.jbcs.el7 |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:2.4.37-78.jbcs.el7 | 1:2.4.37-78.jbcs.el7 |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.9.2-67.GA.jbcs.el7 | 0:2.9.2-67.GA.jbcs.el7 |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.9.2-67.GA.jbcs.el7 | 0:2.9.2-67.GA.jbcs.el7 |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:2.4.37-78.jbcs.el7 | 0:2.4.37-78.jbcs.el7 |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:2.4.37-78.jbcs.el7 | 1:2.4.37-78.jbcs.el7 |
jbcs-httpd24-nghttp2Red Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.39.2-39.jbcs.el7 | 0:1.39.2-39.jbcs.el7 |
jbcs-httpd24-nghttp2-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.39.2-39.jbcs.el7 | 0:1.39.2-39.jbcs.el7 |
jbcs-httpd24-nghttp2-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.39.2-39.jbcs.el7 | 0:1.39.2-39.jbcs.el7 |
jbcs-httpd24-opensslRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-openssl-chilRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.0.0-7.jbcs.el7 | 0:1.0.0-7.jbcs.el7 |
jbcs-httpd24-openssl-chil-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:1.0.0-7.jbcs.el7 | 0:1.0.0-7.jbcs.el7 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-openssl-develRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-openssl-libsRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-openssl-perlRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-openssl-pkcs11Red Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:0.4.10-22.jbcs.el7 | 0:0.4.10-22.jbcs.el7 |
jbcs-httpd24-openssl-pkcs11-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 0:0.4.10-22.jbcs.el7 | 0:0.4.10-22.jbcs.el7 |
jbcs-httpd24-openssl-staticRed Hat:jboss_core_services:1::el7 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.jbcs.el7 | 1:1.1.1g-8.jbcs.el7 |
jbcs-httpd24-aprRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.3-107.el8jbcs | 0:1.6.3-107.el8jbcs |
jbcs-httpd24-apr-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.3-107.el8jbcs | 0:1.6.3-107.el8jbcs |
jbcs-httpd24-apr-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.3-107.el8jbcs | 0:1.6.3-107.el8jbcs |
jbcs-httpd24-apr-utilRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-ldapRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-ldap-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-mysqlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-mysql-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-nssRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-nss-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-odbcRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-odbc-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-opensslRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-openssl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-pgsqlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-pgsql-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-sqliteRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-apr-util-sqlite-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.6.1-84.el8jbcs | 0:1.6.1-84.el8jbcs |
jbcs-httpd24-curlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:7.78.0-2.el8jbcs | 0:7.78.0-2.el8jbcs |
jbcs-httpd24-curl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:7.78.0-2.el8jbcs | 0:7.78.0-2.el8jbcs |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-httpd-tools-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-libcurlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:7.78.0-2.el8jbcs | 0:7.78.0-2.el8jbcs |
jbcs-httpd24-libcurl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:7.78.0-2.el8jbcs | 0:7.78.0-2.el8jbcs |
jbcs-httpd24-libcurl-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:7.78.0-2.el8jbcs | 0:7.78.0-2.el8jbcs |
jbcs-httpd24-mod_cluster-nativeRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.3.16-9.Final_redhat_2.el8jbcs | 0:1.3.16-9.Final_redhat_2.el8jbcs |
jbcs-httpd24-mod_cluster-native-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.3.16-9.Final_redhat_2.el8jbcs | 0:1.3.16-9.Final_redhat_2.el8jbcs |
jbcs-httpd24-mod_http2Red Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.15.7-21.el8jbcs | 0:1.15.7-21.el8jbcs |
jbcs-httpd24-mod_http2-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.15.7-21.el8jbcs | 0:1.15.7-21.el8jbcs |
jbcs-httpd24-mod_jkRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.el8jbcs | 0:1.2.48-20.redhat_1.el8jbcs |
jbcs-httpd24-mod_jk-ap24Red Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.el8jbcs | 0:1.2.48-20.redhat_1.el8jbcs |
jbcs-httpd24-mod_jk-ap24-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.el8jbcs | 0:1.2.48-20.redhat_1.el8jbcs |
jbcs-httpd24-mod_jk-manualRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.2.48-20.redhat_1.el8jbcs | 0:1.2.48-20.redhat_1.el8jbcs |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_ldap-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_mdRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.0.8-40.el8jbcs | 1:2.0.8-40.el8jbcs |
jbcs-httpd24-mod_md-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.0.8-40.el8jbcs | 1:2.0.8-40.el8jbcs |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.4.37-78.el8jbcs | 1:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_proxy_html-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.4.37-78.el8jbcs | 1:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.9.2-67.GA.el8jbcs | 0:2.9.2-67.GA.el8jbcs |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.9.2-67.GA.el8jbcs | 0:2.9.2-67.GA.el8jbcs |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_session-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:2.4.37-78.el8jbcs | 0:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.4.37-78.el8jbcs | 1:2.4.37-78.el8jbcs |
jbcs-httpd24-mod_ssl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:2.4.37-78.el8jbcs | 1:2.4.37-78.el8jbcs |
jbcs-httpd24-nghttp2Red Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.39.2-39.el8jbcs | 0:1.39.2-39.el8jbcs |
jbcs-httpd24-nghttp2-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.39.2-39.el8jbcs | 0:1.39.2-39.el8jbcs |
jbcs-httpd24-nghttp2-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.39.2-39.el8jbcs | 0:1.39.2-39.el8jbcs |
jbcs-httpd24-opensslRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-chilRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.0.0-7.el8jbcs | 0:1.0.0-7.el8jbcs |
jbcs-httpd24-openssl-chil-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:1.0.0-7.el8jbcs | 0:1.0.0-7.el8jbcs |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-develRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-libsRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-libs-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-perlRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
jbcs-httpd24-openssl-pkcs11Red Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:0.4.10-22.el8jbcs | 0:0.4.10-22.el8jbcs |
jbcs-httpd24-openssl-pkcs11-debuginfoRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 0:0.4.10-22.el8jbcs | 0:0.4.10-22.el8jbcs |
jbcs-httpd24-openssl-staticRed Hat:jboss_core_services:1::el8 From an advisory covering 13 CVEs |
before 1:1.1.1g-8.el8jbcs | 1:1.1.1g-8.el8jbcs |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3688 is a medium vulnerability (CVSS 4.8) in Redhat Jboss Core Services Httpd, published August 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=1990252
access.redhat.com/security/cve/CVE-2021-3688
nvd.nist.gov/vuln/detail/CVE-2021-3688
github.com/advisories/GHSA-f3rq-463v-2j36
Show 54 moreShow less
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4614.json
cve.org/CVERecord?id=CVE-2019-17567
httpd.apache.org/security/vulnerabilities_24.html
openssl.org/news/secadv/20210824.txt