Product by Red Hat
Red Hat Jboss Enterprise Application Platform 7.4.25
12 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 7.4.25 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-15567 | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener | 7.5 | |
| High | CVE-2026-15555 | Red Hat JBoss Enterprise Application Platform: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2026-15565 | Red Hat: Classic Buffer Overflow | 7.5 | |
| High | CVE-2026-86404 | Red Hat: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2026-15562 | Red Hat JBoss Enterprise Application Platform: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2026-15560 | Openjdk-orb: unauthed class loading via iiop in eap | 8.1 | |
| High | CVE-2026-15561 | Undertow-core: oom via missing limits in chunked trailer in eap's undertow | 7.5 | |
| High | CVE-2026-101292 | Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization | 8.2 | |
| Critical | CVE-2026-10579 | Picketlink-federation: auth bypass in picketlink saml unsolicited-response | 9.8 | |
| High | CVE-2026-15563 | Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos | 7.4 | |
| High | CVE-2026-15554 | Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery | 7.4 | |
| High | CVE-2026-15556 | Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions | 8.1 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,