Advisories · Technology
Red Hat JBoss Enterprise Application Platform 7.4.25.
Every CVE that names Red Hat JBoss Enterprise Application Platform 7.4.25 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Code injection
- CVSS 7.5 High
Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 7.5 High
Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Memory corruption
- CVSS 7.4 High
Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Authentication bypass
- CVSS 7.5 High
Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Memory corruption
- CVSS 7.5 High
Undertow-core: oom via missing limits in chunked trailer in eap's undertow
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 8.1 High
Openjdk-orb: unauthed class loading via iiop in eap
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- CWE-829
- CVSS 8.1 High
Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS
- CVSS 8.8 High
Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Insecure deserialization
- CVSS 7.4 High
Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · CVSS 9+
Picketlink-federation: auth bypass in picketlink saml unsolicited-response
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS