Product by Red Hat
Red Hat Jboss Enterprise Application Platform
8 known vulnerabilities in Red Hat Jboss Enterprise Application Platform (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-5685 | Xnio: stackoverflowexception when the chain of notifier states becomes problematically big | 7.5 | |
| High | CVE-2024-5971 | Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| Medium | CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 | |
| Medium | CVE-2023-4061 | Red Hat JBoss Enterprise Application Platform: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2024-1233 | Eap: wildfly-elytron has a ssrf security issue | 7.3 | |
| Medium | CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 | |
| Medium | CVE-2024-4029 | Wildfly: no timeout for eap management interface may lead to denial of service (dos) | 4.1 |