Every CVE Search/ Get API key

CVE-2017-18214

Regular Expression Denial of Service in moment

7.5 HighFix available

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.65%Down 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
CVE-2017-18214
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-400
Updated
2026-11-02
CVE List No score

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
CVE-2017-18214
Updated
2026-11-02
EUVDEUVD-2018-0169 No score

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
EUVD-2018-0169
Updated
2026-11-03
GitHub AdvisoriesGHSA-446m-mv8f-q348 7.5

Regular Expression Denial of Service in moment

Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings.

Recommendation

Update to version 2.19.3 or later.

Record
GHSA-446m-mv8f-q348
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVAZL-32178 7.5

CVE-2017-18214 affecting package reaper for versions less than 3.1.1-10

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
AZL-32178
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-41019 7.5

CVE-2017-18214 affecting package ntopng for versions less than 5.2.1-4

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
AZL-41019
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
Show 11 moreShow less
OSV 7.5

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
CVE-2017-18214
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-18214 7.5

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
DEBIAN-CVE-2017-18214
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-446m-mv8f-q348 7.5

Regular Expression Denial of Service in moment

Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings.

Recommendation

Update to version 2.19.3 or later.

Record
GHSA-446m-mv8f-q348
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVRHSA-2023:0552 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0552
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0553 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0553
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0554 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-18214 7.5

The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Record
UBUNTU-CVE-2017-18214
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2026-1773101684 No score

TuxCare security update for moment (3 CVEs)

TuxCare rebuilt moment to address 3 CVEs. Fixed in 2.10.6-tuxcare.1.

Record
CLSA-2026-1773101684
Updated
2026-11-02
OSVCLSA-2026-1784856185 No score

TuxCare security update for moment (2 CVEs)

TuxCare rebuilt moment to address 2 CVEs. Fixed in 2.0.0-tuxcare.1.

Record
CLSA-2026-1784856185
Updated
2026-11-02
OSVROOT-APP-NPM-CVE-2017-18214 No score

CVE-2017-18214 in moment - Patched by Root

Root has patched CVE-2017-18214 in the moment package for Root:npm. Multiple fixed versions available.

Record
ROOT-APP-NPM-CVE-2017-18214
Updated
2026-11-06
OSVUSN-4786-1 No score

node-moment vulnerabilities

It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service.

Record
USN-4786-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
moment
npm
 before 2.19.3
2.19.3
reaper
Azure Linux:2
 before 3.1.1-10
3.1.1-10
ntopng
Azure Linux:3
 before 5.2.1-4
5.2.1-4
moment
TuxCare:npm
From an advisory covering 3 CVEs
 2.10.6-tuxcare.0 up to 2.10.6-tuxcare.1, plus listed versions
2.10.6
2.10.6-tuxcare.1
moment
TuxCare:npm
From an advisory covering 2 CVEs
 2.0.0-tuxcare.0 up to 2.0.0-tuxcare.1, plus listed versions
2.0.0
2.0.0-tuxcare.1
node-moment
Debian:12
 before 2.19.3+ds-1
2.19.3+ds-1
node-moment
Debian:13
 before 2.19.3+ds-1
2.19.3+ds-1
node-moment
Debian:14
 before 2.19.3+ds-1
2.19.3+ds-1
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el7eap
0:3.3.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
Show 145 moreShow less
Affected packages
PackageAffectedFixed
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el7eap
0:1.5.2-1.redhat_00002.1.el7eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el7eap
0:6.4.0-1.redhat_00001.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el7eap
0:2.9.2-1.redhat_00001.1.el7eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el7eap
0:4.0.49-1.Final_redhat_00001.1.el7eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el7eap
0:3.0.0-6.SP07_redhat_00001.1.el7eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el7eap
0:2.0.0-3.Final_redhat_00001.1.el7eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el7eap
0:5.0.27-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el7eap
0:2.2.22-1.SP3_redhat_00001.1.el7eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el8eap
0:3.3.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el8eap
0:1.5.2-1.redhat_00002.1.el8eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el8eap
0:6.4.0-1.redhat_00001.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el8eap
0:2.9.2-1.redhat_00001.1.el8eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el8eap
0:4.0.49-1.Final_redhat_00001.1.el8eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el8eap
0:3.0.0-6.SP07_redhat_00001.1.el8eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el8eap
0:2.0.0-3.Final_redhat_00001.1.el8eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el8eap
0:5.0.27-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el8eap
0:2.2.22-1.SP3_redhat_00001.1.el8eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el9eap
0:3.3.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el9eap
0:1.5.2-1.redhat_00002.1.el9eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el9eap
0:6.4.0-1.redhat_00001.1.el9eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el9eap
0:2.9.2-1.redhat_00001.1.el9eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el9eap
0:1.9.3-1.Final_redhat_00001.1.el9eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el9eap
0:4.0.49-1.Final_redhat_00001.1.el9eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el9eap
0:3.0.0-6.SP07_redhat_00001.1.el9eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el9eap
0:2.0.0-3.Final_redhat_00001.1.el9eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el9eap
0:5.0.27-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el9eap
0:2.2.22-1.SP3_redhat_00001.1.el9eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el9eap
0:1.9.3-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
moment
Root:npm
 before 2.0.0-aikido.4
2.0.0-aikido.42.19.3-aikido.1
@rootio/moment
Root:npm
 before 2.0.0-root.io.2
2.0.0-root.io.22.0.0-root.io.12.0.0-root.io.32.0.0-root.io.42.19.3-root.io.1
node-moment
Ubuntu:Pro:16.04:LTS
 before 2.11.0+ds-1ubuntu0.1~esm1, plus listed versions
2.10.6+dfsg-12.11.0+ds-1
2.11.0+ds-1ubuntu0.1~esm1
node-moment
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 2.11.0+ds-1ubuntu0.1~esm1, plus listed versions
2.10.6+dfsg-12.11.0+ds-1
2.11.0+ds-1ubuntu0.1~esm1

History

History
RecordedChangedSources
affectedOSV
affected
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-18214 is a high vulnerability (CVSS 7.5) in Momentjs Moment, published March 4, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.65%, the 89th percentile. Fixed in moment 2.19.3.

References

Show 121 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open