Skip to content

Vulnerabilities of Red Hat Red Hat JBoss Web Server 5

Is your version affected?

CVE Summary Score Published
CVE-2026-76166 A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module) 4.3 Medium Aug 19, 2026
CVE-2026-50628 A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly… Not rated Jun 12, 2026
CVE-2026-50627 The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access… Not rated Jun 12, 2026
CVE-2026-49875 Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary… Not rated Jun 12, 2026
CVE-2026-49975 Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service… Not rated Jun 8, 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Not rated Apr 22, 2026
CVE-2026-34486 Exploited Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Not rated Apr 9, 2026
CVE-2026-29146 Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration Not rated Apr 9, 2026
CVE-2025-67030 Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before… 8.8 High Mar 25, 2026
CVE-2026-24734 Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat Not rated Feb 17, 2026
CVE-2022-4132 A flaw was found in JSS 5.9 Medium Oct 4, 2023
CVE-2022-4245 A flaw was found in codehaus-plexus 4.3 Medium Sep 25, 2023
CVE-2022-4244 A flaw was found in codeplex-codehaus 7.5 High Sep 25, 2023

Other Red Hat products