# Redhat Enterprise Linux for Scientific Computing


- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2019-8720](https://insights.sbomify.com/CVE-2019-8720/): WebKitGTK Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2019-11043](https://insights.sbomify.com/CVE-2019-11043/): PHP FastCGI Process Manager (FPM) Buffer Overflow (high 8.7, exploited in the wild)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2021-4034](https://insights.sbomify.com/CVE-2021-4034/): Red Hat Polkit Out-of-Bounds Read and Write (high 7.8, exploited in the wild)
- [CVE-2013-1675](https://insights.sbomify.com/CVE-2013-1675/): Mozilla Firefox Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2015-4902](https://insights.sbomify.com/CVE-2015-4902/): Oracle Java SE Integrity Check (medium 5.3, exploited in the wild)
- [CVE-2015-5165](https://insights.sbomify.com/CVE-2015-5165/): Information disclosure in n/a (critical 9.3)
- [CVE-2023-5869](https://insights.sbomify.com/CVE-2023-5869/): Postgresql: buffer overrun from integer overflow in array modification (high 8.8)
- [CVE-2022-4254](https://insights.sbomify.com/CVE-2022-4254/): Other in SSSD (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/redhat/enterprise-linux-for-scientific-computing/