Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-5588	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	6.3 Moyenne	15 avr. 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 Élevée	15 avr. 2026
CVE-2026-0636	Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the…	5.5 Moyenne	15 avr. 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critique	15 avr. 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 Élevée	27 mars 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	27 mars 2026
CVE-2026-28367	Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator	8.7 Élevée	27 mars 2026
CVE-2026-28369	Undertow: undertow: request smuggling via malformed http request headers	8.7 Élevée	27 mars 2026
CVE-2026-28368	Undertow: undertow: request smuggling via inconsistent header parsing	8.7 Élevée	27 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 Élevée	5 mars 2026
CVE-2026-27446	Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis	9.3 Critique	4 mars 2026
CVE-2026-27830	c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and…	8.9 Élevée	26 févr. 2026
CVE-2026-27727	mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI…	8.9 Élevée	25 févr. 2026
CVE-2025-12543	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf	9.6 Critique	7 janv. 2026
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	Élevée	3 déc. 2025
CVE-2025-9784	Undertow: undertow madeyoureset http/2 ddos vulnerability	7.5 Élevée	2 sept. 2025
CVE-2025-23368	Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli	8.1 Élevée	4 mars 2025

Autres produits Red Hat