Product by Red Hat
Red Hat Jboss Enterprise Application Platform 7.4 For Rhel 8
18 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 7.4 For Rhel 8 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1635 | Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol | 7.5 | |
| High | CVE-2023-5685 | Xnio: stackoverflowexception when the chain of notifier states becomes problematically big | 7.5 | |
| High | CVE-2024-5971 | Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| High | CVE-2023-3223 | Undertow: outofmemoryerror due to @multipartconfig handling | 7.5 | |
| High | CVE-2023-1108 | Undertow: infinite loop in sslconduit during close | 7.5 | |
| High | CVE-2023-1973 | Undertow: unrestricted request storage leads to memory exhaustion | 7.5 | |
| Medium | CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 | |
| Medium | CVE-2024-1459 | Undertow: directory traversal vulnerability | 5.3 | |
| High | CVE-2023-4639 | Undertow: cookie smuggling/spoofing | 7.4 | |
| High | CVE-2023-3171 | Eap-7: heap exhaustion via deserialization | 7.5 | |
| Medium | CVE-2025-2251 | Wildfly: Deserialization of Untrusted Data | 6.2 | |
| Medium | CVE-2023-4061 | Red Hat JBoss Enterprise Application Platform: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| High | CVE-2024-1233 | Eap: wildfly-elytron has a ssrf security issue | 7.3 | |
| Medium | CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 | |
| High | CVE-2023-4503 | Eap-galleon: custom provisioning creates unsecured http-invoker | 6.8 | |
| High | CVE-2024-10234 | Wildfly: wildfly vulnerable to cross-site scripting (xss) | 6.1 | |
| Medium | CVE-2024-4029 | Wildfly: no timeout for eap management interface may lead to denial of service (dos) | 4.1 |