Product by Red Hat
Red Hat Jboss Enterprise Application Platform 8.1 For Rhel 10
14 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 8.1 For Rhel 10 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-5680 | Undertow-core: undertow: denial of service via websocket permessage-deflate processing | 7.5 | |
| High | CVE-2026-15567 | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener | 7.5 | |
| High | CVE-2026-15555 | Red Hat JBoss Enterprise Application Platform: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2026-15565 | Red Hat: Classic Buffer Overflow | 7.5 | |
| High | CVE-2026-86404 | Red Hat: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2026-15562 | Red Hat JBoss Enterprise Application Platform: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2026-15560 | Openjdk-orb: unauthed class loading via iiop in eap | 8.1 | |
| High | CVE-2026-15561 | Undertow-core: oom via missing limits in chunked trailer in eap's undertow | 7.5 | |
| Medium | CVE-2026-14180 | Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap | 5.3 | |
| High | CVE-2026-15563 | Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos | 7.4 | |
| Medium | CVE-2026-10832 | Red Hat JBoss Enterprise Application Platform 8.1.8.GA: Allocation of Resources Without Limits or Throttling | 5.9 | |
| High | CVE-2026-15554 | Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery | 7.4 | |
| Medium | CVE-2025-12799 | Jastow: jastow cross-site scripting attack due to unsanitized uri | 6.5 | |
| Medium | CVE-2026-85511 | Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 | 4.2 |