Jboss Enterprise Application Platform Eus (Redhat) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-02-11. Vendor: Redhat.
CVEs of Jboss Enterprise Application Platform Eus
- CVE-2025-69873 - CVSS 7.5 (high), 2026-02-11: ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern…
- CVE-2026-24842 - CVSS 8.2 (high), 2026-01-28: node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution…
- CVE-2026-0603 - CVSS 8.3 (high), 2026-01-23: A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted,…
- CVE-2025-13465 - CVSS 8.2 (high), 2026-01-21: The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution. An attacker can pass crafted paths which cause Lodash to delete methods from…
- CVE-2025-12543 - CVSS 9.6 (critical), 2026-01-07: A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly…
- CVE-2024-3884 - CVSS 7.5 (high), 2025-12-03: A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel)…
- CVE-2025-9784 - CVSS 7.5 (high), 2025-09-02: A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to…
- CVE-2025-23368 - CVSS 8.1 (high), 2025-03-04: A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts…
- CVE-2024-7885 - CVSS 7.5 (high), 2024-08-21: A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs…
- CVE-2024-1233 - CVSS 7.3 (high), 2024-04-09: A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP request. During this process, no…
- CVE-2023-5685 - CVSS 7.5 (high), 2024-03-22: A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can…
- CVE-2024-1635 - CVSS 7.5 (high), 2024-02-19: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and…
- CVE-2023-5379 - CVSS 7.5 (high), 2023-12-12: A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by…
