apache2-mod_jk (SUSE:Linux Enterprise Module for Server Applications 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Server Applications 15 SP6 package apache2-mod_jk, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-41081 — CVSS 7.5 (high): Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a…
• CVE-2024-46544 — CVSS 5.9 (medium): Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing…