Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50633	A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code…	Not rated	Jun 12, 2026
CVE-2026-50632	A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache…	Not rated	Jun 12, 2026
CVE-2026-50628	A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly…	Not rated	Jun 12, 2026
CVE-2026-50627	The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access…	Not rated	Jun 12, 2026
CVE-2026-49875	Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary…	Not rated	Jun 12, 2026
CVE-2026-44890	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44250	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 11, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-11986	A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface…	4.9 Medium	Jun 11, 2026
CVE-2026-46625	JavaScript Cookie is a JavaScript API for handling cookies, client-side	7.5 High	Jun 10, 2026
CVE-2026-41731	JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using…	8.1 High	Jun 9, 2026
CVE-2025-71319	image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block…	8.7 High	Jun 9, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-11577	A flaw was found in Keycloak	7.2 High	Jun 8, 2026
CVE-2026-10805	Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend	6.7 Medium	Jun 4, 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 High	Jun 1, 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Medium	May 28, 2026
CVE-2026-44417	The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that…	Not rated	May 22, 2026
CVE-2026-44930	An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an…	Not rated	May 22, 2026
CVE-2026-41292	NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to…	6.6 Medium	May 20, 2026
CVE-2026-47323	Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative…	Not rated	May 19, 2026

Other Red Hat products