CVE-2022-0853
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...
7.5 HighPublic exploit
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.45%Unchanged since Mar 12, 2022
What each source reports
NVD Score used
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
- Record
CVE-2022-0853- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-401
- Updated
- 2026-11-02
CVE List No score
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
- Record
CVE-2022-0853- Updated
- 2026-11-02
EUVDEUVD-2022-15896 No score
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
- Record
EUVD-2022-15896- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f67w-c9w2-5v69
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.
- Record
GHSA-f67w-c9w2-5v69- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVRHSA-2022:4918
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7
- Record
RHSA-2022:4918- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:4919
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8
- Record
RHSA-2022:4919- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:7409
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 7
- Record
RHSA-2022:7409- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:7410
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 8
- Record
RHSA-2022:7410- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2022:7411
Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 9
- Record
RHSA-2022:7411- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.12.6.1-1.redhat_00003.1.el7eap | 0:2.12.6.1-1.redhat_00003.1.el7eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
Show 119 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el7eap | 0:4.1.72-4.Final_redhat_00001.1.el7eap |
eap7-h2databaseRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.4.197-2.redhat_00004.1.el7eap | 0:1.4.197-2.redhat_00004.1.el7eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:3.8.7-1.SP1_redhat_00001.1.el7eap | 0:3.8.7-1.SP1_redhat_00001.1.el7eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el7eap | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el7eap | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el7eap | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el7eap | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el7eap | 0:1.1.11-1.SP1_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el7eap | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el7eap | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el7eap | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el7eap | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el7eap | 0:7.4.5-3.GA_redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.2.17-2.SP4_redhat_00001.1.el7eap | 0:2.2.17-2.SP4_redhat_00001.1.el7eap |
eap7-xerces-j2Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.12.0-3.SP04_redhat_00001.1.el7eap | 0:2.12.0-3.SP04_redhat_00001.1.el7eap |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el7eap | 0:2.16.0-9.redhat_00042.1.el7eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 14 CVEs |
before 0:3.3.12-1.Final_redhat_00001.1.el7eap | 0:3.3.12-1.Final_redhat_00001.1.el7eap |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.12.6.1-1.redhat_00003.1.el8eap | 0:2.12.6.1-1.redhat_00003.1.el8eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:4.1.72-4.Final_redhat_00001.1.el8eap | 0:4.1.72-4.Final_redhat_00001.1.el8eap |
eap7-h2databaseRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.4.197-2.redhat_00004.1.el8eap | 0:1.4.197-2.redhat_00004.1.el8eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:3.8.7-1.SP1_redhat_00001.1.el8eap | 0:3.8.7-1.SP1_redhat_00001.1.el8eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el8eap | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el8eap | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el8eap | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el8eap | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:1.1.11-1.SP1_redhat_00001.1.el8eap | 0:1.1.11-1.SP1_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el8eap | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el8eap | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:7.4.5-3.GA_redhat_00001.1.el8eap | 0:7.4.5-3.GA_redhat_00001.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.2.17-2.SP4_redhat_00001.1.el8eap | 0:2.2.17-2.SP4_redhat_00001.1.el8eap |
eap7-xerces-j2Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.12.0-3.SP04_redhat_00001.1.el8eap | 0:2.12.0-3.SP04_redhat_00001.1.el8eap |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:2.16.0-9.redhat_00042.1.el8eap | 0:2.16.0-9.redhat_00042.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 14 CVEs |
before 0:3.3.12-1.Final_redhat_00001.1.el8eap | 0:3.3.12-1.Final_redhat_00001.1.el8eap |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el7sso | 0:18.0.3-1.redhat_00001.1.el7sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el7sso | 0:18.0.3-1.redhat_00001.1.el7sso |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el8sso | 0:18.0.3-1.redhat_00001.1.el8sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el8sso | 0:18.0.3-1.redhat_00001.1.el8sso |
rh-sso7Red Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:1-5.el9sso | 0:1-5.el9sso |
rh-sso7-javapackages-filesystemRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:6.0.0-7.el9sso | 0:6.0.0-7.el9sso |
rh-sso7-javapackages-toolsRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:6.0.0-7.el9sso | 0:6.0.0-7.el9sso |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el9sso | 0:18.0.3-1.redhat_00001.1.el9sso |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:18.0.3-1.redhat_00001.1.el9sso | 0:18.0.3-1.redhat_00001.1.el9sso |
rh-sso7-python3-javapackagesRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:6.0.0-7.el9sso | 0:6.0.0-7.el9sso |
rh-sso7-runtimeRed Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 11 CVEs |
before 0:1-5.el9sso | 0:1-5.el9sso |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | ByteHackr/CVE-2022-0853 | 2022-03-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0853 is a high vulnerability (CVSS 7.5) in Redhat Descision Manager, published March 11, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.45%, the 73rd percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=2060725
github.com/ByteHackr/CVE-2022-0853
nvd.nist.gov/vuln/detail/CVE-2022-0853
access.redhat.com/errata/RHSA-2022:4918
Show 106 moreShow less
issues.redhat.com/browse/JBEAP-23120
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4918.json
cve.org/CVERecord?id=CVE-2020-36518
lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2