Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-2332	In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to…	7.4 Élevée	14 avr. 2026
CVE-2026-39304	Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ	Non notée	10 avr. 2026
CVE-2026-34197	Exploitée Apache ActiveMQ Improper Input Validation Vulnerability	Non notée	7 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 Élevée	27 mars 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	27 mars 2026
CVE-2026-28367	Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator	8.7 Élevée	27 mars 2026
CVE-2026-28369	Undertow: undertow: request smuggling via malformed http request headers	8.7 Élevée	27 mars 2026
CVE-2026-28368	Undertow: undertow: request smuggling via inconsistent header parsing	8.7 Élevée	27 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-3260	A flaw was found in Undertow	5.9 Moyenne	24 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 Élevée	7 mars 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Non notée	7 mars 2026
CVE-2026-24281	Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails,…	Non notée	7 mars 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 Élevée	5 mars 2026
CVE-2026-27446	Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis	9.3 Critique	4 mars 2026
CVE-2026-27830	c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and…	8.9 Élevée	26 févr. 2026
CVE-2026-27727	mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI…	8.9 Élevée	25 févr. 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Faible	11 févr. 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 Élevée	30 janv. 2026
CVE-2026-24842	node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink…	8.2 Élevée	28 janv. 2026
CVE-2026-0603	Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection	8.3 Élevée	23 janv. 2026

Autres produits Red Hat