Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-15554	the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret…	7.4 High	Aug 11, 2026
CVE-2026-15555	A flaw was found in JBoss marshalling	8.8 High	Aug 11, 2026
CVE-2026-10579	A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no…	9.8 Critical	Aug 11, 2026
CVE-2026-24329	Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.	4.9 Medium	Aug 11, 2026
CVE-2026-24330	Wildfly-core: wildfly: arbitrary file read via malicious archive deployment	6.5 Medium	Aug 11, 2026
CVE-2026-17614	A path traversal flaw was found in WildFly's domain mode implementation	4.4 Medium	Aug 4, 2026
CVE-2025-12799	A flaw was found in Jastow	6.5 Medium	Jul 7, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 High	Jun 12, 2026
CVE-2026-50011	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-48006	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-46340	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50632	A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache…	Not rated	Jun 12, 2026
CVE-2026-49875	Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary…	Not rated	Jun 12, 2026
CVE-2026-44890	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44250	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-46625	JavaScript Cookie is a JavaScript API for handling cookies, client-side	7.5 High	Jun 10, 2026

Other Red Hat products