Known vulnerabilities in JBoss Enterprise Application Platform

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543
CWE-644 Medium
No
No
8.1.3 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 8 more
#VU119260 - Resource exhaustion
CVE-2024-3884
CWE-400 Medium
No
No
8.0.11, 8.1.3 08.12.2025 SB2025120817
SB2025120926
SB2025120927
and 13 more
#VU118734 - Resource exhaustion
CVE-2025-9784
CWE-400 Medium
No
No
8.1.3 24.11.2025 SB2024121157
SB2025121162
SB2026021723
and 3 more
#VU117342 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-48913
CWE-94 Medium
No
No
8.0.9, 8.1.0 17.10.2025 SB2025101733
SB2025101736
SB2025102866
and 4 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056
CWE-444 Medium
No
No
8.0.9, 8.1.0 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 38 more
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949
CWE-611 High
No
No
8.0.11, 8.1.2 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU114026 - Resource exhaustion
CVE-2025-55163
CWE-400 Medium
No
No
7.1.13, 7.3.16, 8.0.9, 8.1.0 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU112106 - Memory corruption
CVE-2025-52999
CWE-119 Medium
No
No
7.1.13, 7.3.16, 7.4.23 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU106934 - Resource Management Errors
CVE-2024-8447
CWE-399 Medium
No
No
8.0.6 03.04.2025 SB2025040338
SB2025040341
#VU106929 - Improper Access Control
CVE-2025-23367
CWE-284 Medium
No
No
7.4.21, 7.4.22 03.04.2025 SB2025040321
SB2025040329
SB2025050938
and 3 more
#VU105956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10234
CWE-79 Low
No
No
8.0.6 24.03.2025 SB2025032404
SB2025032458
SB2025072352
and 3 more
#VU105112 - Resource exhaustion
CVE-2025-23184
CWE-400 Medium
No
No
8.1.3 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
7.4.21, 7.4.22, 8.0.6 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193
CWE-400 Low
No
No
7.4.21, 7.4.22, 8.0.6 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100259 - Resource Management Errors
CVE-2024-47535
CWE-399 Low
No
No
7.4.21, 7.4.22, 8.0.6 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU96900 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7885
CWE-200 Medium
No
No
7.3.16 05.09.2024 SB2024090598
SB2024090599
SB2024092018
and 16 more
#VU70443 - Exposure of sensitive information to an unauthorized actor
CVE-2022-46363
CWE-200 Low
No
No
7.1.9, 7.3.12 20.12.2022 SB2022122009
SB2023011707
SB2023012719
and 22 more
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889
CWE-94 High
Available
Exploited
7.1.9, 7.3.12 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU61937 - Deserialization of Untrusted Data
CVE-2021-42392
CWE-502 Critical
Available
No
7.3.12, 7.4.5 06.04.2022 SB2022040617
SB2022040619
SB2022042257
and 10 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840
CWE-94 Medium
Available
No
7.1.9 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more


Showing elements 1 - 20 out of 241