# Red Hat JBoss Enterprise Application Platform 7.4.25.

Every CVE that names Red Hat JBoss Enterprise Application Platform 7.4.25 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization](https://agentprime.io/advisories/CVE-2026-101292.md)
  `CVE-2026-101292` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 2 more · CVSS 8.2 High · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection
- [Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener](https://agentprime.io/advisories/CVE-2026-15567.md)
  `CVE-2026-15567` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service
- [Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method](https://agentprime.io/advisories/CVE-2026-15565.md)
  `CVE-2026-15565` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos](https://agentprime.io/advisories/CVE-2026-15563.md)
  `CVE-2026-15563` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service](https://agentprime.io/advisories/CVE-2026-15562.md)
  `CVE-2026-15562` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Undertow-core: oom via missing limits in chunked trailer in eap's undertow](https://agentprime.io/advisories/CVE-2026-15561.md)
  `CVE-2026-15561` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Denial of service
- [Openjdk-orb: unauthed class loading via iiop in eap](https://agentprime.io/advisories/CVE-2026-15560.md)
  `CVE-2026-15560` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-829
- [Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions](https://agentprime.io/advisories/CVE-2026-15556.md)
  `CVE-2026-15556` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller](https://agentprime.io/advisories/CVE-2026-15555.md)
  `CVE-2026-15555` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Insecure deserialization
- [Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery](https://agentprime.io/advisories/CVE-2026-15554.md)
  `CVE-2026-15554` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 4 more · CVSS 7.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS
- [Picketlink-federation: auth bypass in picketlink saml unsolicited-response](https://agentprime.io/advisories/CVE-2026-10579.md)
  `CVE-2026-10579` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Weak cryptography or TLS

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-jboss-enterprise-application-platform-7-4-25>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-jboss-enterprise-application-platform-7-4-25/>. Everything for agents: <https://agentprime.io/llms.txt>.