Advisories · Technology
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7.
Every CVE that names Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Code injection
- CVSS 7.5 High
Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 7.5 High
Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Memory corruption
- CVSS 7.4 High
Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Authentication bypass
- CVSS 7.5 High
Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Memory corruption
- CVSS 7.5 High
Undertow-core: oom via missing limits in chunked trailer in eap's undertow
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Denial of service
- CVSS 8.1 High
Openjdk-orb: unauthed class loading via iiop in eap
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- CWE-829
- CVSS 8.1 High
Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS
- CVSS 8.8 High
Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Insecure deserialization
- CVSS 7.4 High
Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · CVSS 9+
Picketlink-federation: auth bypass in picketlink saml unsolicited-response
- Red Hat JBoss Enterprise Application Platform 7.4.25
- Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
- Weak cryptography or TLS