Product by Red Hat

    Red Hat Jboss Enterprise Application Platform 7.4 Els On Rhel 8

    15 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 7.4 Els On Rhel 8 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Jboss Enterprise Application Platform 7.4 Els On Rhel 8 (Red Hat)
    HighCVE-2025-9784

    Undertow: undertow madeyoureset http/2 ddos vulnerability

    also in 35 other products

    		7.5
    CriticalCVE-2025-12543

    Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation

    also in 33 other products

    		9.6
    HighCVE-2026-15567

    Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

    also in 12 other products

    		7.5
    HighCVE-2026-15555

    Red Hat JBoss Enterprise Application Platform: Deserialization of Untrusted Data

    also in 9 other products

    		8.8
    HighCVE-2026-15565

    Red Hat: Classic Buffer Overflow

    also in 13 other products

    		7.5
    HighCVE-2026-86404

    Red Hat: Deserialization of Untrusted Data

    also in 11 other products

    		8.8
    HighCVE-2026-15562

    Red Hat JBoss Enterprise Application Platform: Integer Overflow or Wraparound

    also in 8 other products

    		7.5
    HighCVE-2024-3884

    Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

    also in 32 other products

    		7.5
    HighCVE-2026-15560

    Openjdk-orb: unauthed class loading via iiop in eap

    also in 8 other products

    		8.1
    HighCVE-2026-0603

    Org.hibernate/hibernate-core: SQL Injection

    also in 21 other products

    		8.3
    HighCVE-2026-15561

    Undertow-core: oom via missing limits in chunked trailer in eap's undertow

    also in 8 other products

    		7.5
    CriticalCVE-2026-10579

    Picketlink-federation: auth bypass in picketlink saml unsolicited-response

    also in 5 other products

    		9.8
    HighCVE-2026-15563

    Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

    also in 14 other products

    		7.4
    HighCVE-2026-15554

    Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery

    also in 8 other products

    		7.4
    HighCVE-2026-15556

    Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions

    also in 6 other products

    		8.1

    News

    All products by Red Hat