Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2025-12543 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | 9.6 Critique | 7 janv. 2026 |
| CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | Élevée | 3 déc. 2025 |
| CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 Élevée | 2 sept. 2025 |
| CVE-2025-2251 | A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans… | 6.2 Moyenne | 7 avr. 2025 |
| CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 Moyenne | 30 janv. 2025 |
| CVE-2024-8447 | A security issue was discovered in the LRA Coordinator component of Narayana | 5.9 Moyenne | 2 janv. 2025 |
| CVE-2024-12369 | A vulnerability was found in OIDC-Client | 4.2 Moyenne | 9 déc. 2024 |
| CVE-2023-4639 | A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming… | 7.4 Élevée | 17 nov. 2024 |
| CVE-2023-1973 | A flaw was found in Undertow package | 7.5 Élevée | 7 nov. 2024 |
| CVE-2024-10234 | A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system | 6.1 Moyenne | 22 oct. 2024 |
| CVE-2024-8883 | A misconfiguration flaw was found in Keycloak | 6.1 Moyenne | 19 sept. 2024 |
| CVE-2024-8698 | A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class | 7.7 Élevée | 19 sept. 2024 |
| CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 Élevée | 21 août 2024 |
| CVE-2024-4029 | A vulnerability was found in Wildfly’s management interface | 4.1 Moyenne | 2 mai 2024 |
| CVE-2024-1102 | A vulnerability was found in jberet-core logging | 6.5 Moyenne | 25 avr. 2024 |
| CVE-2023-6236 | A flaw was found in Red Hat Enterprise Application Platform 8 | 7.3 Élevée | 10 avr. 2024 |
| CVE-2024-1233 | A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP… | 7.3 Élevée | 9 avr. 2024 |
| CVE-2024-1459 | Undertow: directory traversal vulnerability | 5.3 Moyenne | 12 févr. 2024 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433