Product by Red Hat
Red Hat Jboss Enterprise Application Platform 8.0 For Rhel 9
17 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 8.0 For Rhel 9 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2024-8698 | Keycloak: Improper Verification of Cryptographic Signature | 7.7 | |
| High | CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5 | |
| Medium | CVE-2024-8883 | Keycloak: vulnerable redirect uri validation results in open redirec | 6.1 | |
| High | CVE-2023-1973 | Undertow: unrestricted request storage leads to memory exhaustion | 7.5 | |
| Medium | CVE-2024-1459 | Undertow: directory traversal vulnerability | 5.3 | |
| High | CVE-2023-4639 | Undertow: cookie smuggling/spoofing | 7.4 | |
| Medium | CVE-2025-2251 | Wildfly: Deserialization of Untrusted Data | 6.2 | |
| High | CVE-2024-1233 | Eap: wildfly-elytron has a ssrf security issue | 7.3 | |
| Medium | CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 | |
| Medium | CVE-2024-1102 | Jberet: jberet-core logging database credentials | 6.5 | |
| High | CVE-2024-10234 | Wildfly: wildfly vulnerable to cross-site scripting (xss) | 6.1 | |
| Medium | CVE-2024-8447 | Narayana: deadlock via multiple join requests sent to lra coordinator | 5.9 | |
| High | CVE-2023-6236 | Eap: oidc app attempting to access the second tenant, the user should be prompted to log | 7.3 | |
| Medium | CVE-2024-4029 | Wildfly: no timeout for eap management interface may lead to denial of service (dos) | 4.1 |