eap8-elytron-web vulnerabilities (Red Hat)

10 vulnerabilities.

• eap8-elytron-web Red Hat Jastow: jastow cross-site scripting attack due to unsanitized uri CVE-2025-12799 Fix available 6.5 MediumJuly 7, 2026
• eap8-elytron-web Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
• eap8-elytron-web Red Hat base-x homograph attack allows Unicode lookalike characters to bypass validation. CVE-2025-27611 Fix available 8.7 HighApril 30, 2025
• eap8-elytron-web Red Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution CVE-2025-2251 6.2 MediumApril 7, 2025
• eap8-elytron-web Red Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store CVE-2025-2901 Fix availableRejected 4.6 MediumMarch 28, 2025
• eap8-elytron-web Red Hat Apache CXF: Denial of Service vulnerability with temporary files CVE-2025-23184 Fix available 5.9 MediumJanuary 21, 2025
• eap8-elytron-web Red Hat Jberet: jberet-core logging database credentials CVE-2024-1102 Fix available 6.5 MediumApril 25, 2024
• eap8-elytron-web Red Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log CVE-2023-6236 Fix available 7.3 HighApril 10, 2024
• eap8-elytron-web Red Hat Eap: wildfly-elytron has a ssrf security issue CVE-2024-1233 7.3 HighApril 9, 2024
• eap8-elytron-web Red Hat Eap-galleon: custom provisioning creates unsecured http-invoker CVE-2023-4503 6.8 MediumFebruary 6, 2024