Skip to content
Red Hat Eap vulnerabilities
-
red hat jboss data grid 7, jboss eap xp 5.0 update 2.0, jboss enterprise application platform 7 +4 more +6 more
Narayana: deadlock via multiple join requests sent to lra coordinator
CVE-2024-8447
Fix available
5.9 Medium
-
red hat eap 8.0.1, build of apache camel - hawtio 4, build of apache camel 4.4.1 for spring boot 3.2 +11 more +13 more
Undertow: url-encoded request path information can be broken on ajp-listener
CVE-2024-6162
Fix available
7.5 High
-
red hat eap 7.4.14, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 more
Eap-galleon: custom provisioning creates unsecured http-invoker
CVE-2023-4503
6.8 Medium
-
red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 more
Eap-7: heap exhaustion via deserialization
CVE-2023-3171
7.5 High
-
redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more
Undertow: infinite loop in sslconduit during close
CVE-2023-1108
Fix available
7.5 High
-
red hat jboss eap, redhat jboss enterprise application platform, single sign-on +2 more
A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...
CVE-2019-14885
Fix available
5.4 Medium
-
red hat jboss eap, redhat jboss enterprise application platform +1 more
In JBoss EAP 6 a security domain is configured to use a cache that is shared between all...
CVE-2014-0169
6.5 Medium
-
redhat jboss enterprise application platform, red hat eap +1 more
An information disclosure vulnerability was found in JBoss Enterprise Application Platform before...
CVE-2016-7061
3.5 Low
-
red hat eap-7, redhat jboss enterprise application platform +1 more
It was found in EAP 7 before 7.0.9 that properties based files of the management and the...
CVE-2017-12167
5.5 Medium