Advisories · Technology

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7.

Every CVE that names Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-2251 CVE record

CVSS 6.2 Medium

Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- Insecure deserialization
Not analysed yet 7 Apr 2025
CVE-2024-10234 CVE record

CVSS 6.1 Medium

Wildfly: wildfly vulnerable to cross-site scripting (xss)
- Red Hat JBoss Enterprise Application Platform 7
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2024
CVE-2023-4503 CVE record

CVSS 6.8 Medium

Eap-galleon: custom provisioning creates unsecured http-invoker
- Red Hat EAP 7.4.14
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- CWE-665
Not analysed yet 6 Feb 2024
CVE-2023-3171 CVE record

CVSS 7.5 High

Eap-7: heap exhaustion via deserialization
- Red Hat EAP 7.4.13
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- Denial of service
Not analysed yet 27 Dec 2023