Product by Red Hat
Jboss Enterprise Application Platform
18 known vulnerabilities in Jboss Enterprise Application Platform (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-48734 | Apache Commons BeanUtils 1.x: Improper Access Control | 8.8 | |
| Medium | CVE-2025-48924 | Apache Commons Lang: Uncontrolled Recursion | 5.3 | |
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| High | CVE-2025-23184 | Apache CXF: Denial of Service vulnerability with temporary files | 5.9 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2026-15567 | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener | 7.5 | |
| High | CVE-2026-5598 | Legion of the Bouncy Castle BC-JAVA: Covert Timing Channel | 7.5 | |
| High | CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5 | |
| High | CVE-2025-52999 | FasterXML Jackson-core: Stack-based Buffer Overflow | — | |
| High | CVE-2025-12183 | org.lz4:lz4-java - Out-of-Bounds Memory Access | — | |
| High | CVE-2025-66566 | yawkat LZ4 Java has a possible information leak in Java safe decompressor | — | |
| High | CVE-2024-12397 | Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling | 7.4 | |
| High | CVE-2012-5626 | Red Hat JBoss: security vulnerability | 7.5 | |
| Medium | CVE-2024-47535 | Denial of Service attack on windows app using Netty | 5.5 | |
| Medium | CVE-2026-1002 | Eclipse Vert.x Web static handler file access denial | 5.3 | |
| Medium | CVE-2025-12799 | Jastow: jastow cross-site scripting attack due to unsanitized uri | 6.5 | |
| Medium | CVE-2025-11966 | Eclipse Foundation Vert.x: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 6.4 | |
| High | CVE-2016-7066 | Red Hat JBoss Enterprise Application Platform: Incorrect Privilege Assignment | 7.8 |