Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-101292 | | Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization | HIGH 8.2 | 0.5 % | ||
| CVE-2026-15567 | | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener | HIGH 7.5 | 1.0 % | ||
| CVE-2026-15565 | | Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method | HIGH 7.5 | 1.2 % | ||
| CVE-2026-15563 | | Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos | HIGH 7.4 | 0.7 % | ||
| CVE-2026-15562 | | Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2026-15561 | | Undertow-core: oom via missing limits in chunked trailer in eap's undertow | HIGH 7.5 | 0.8 % | ||
| CVE-2026-15560 | | Openjdk-orb: unauthed class loading via iiop in eap | HIGH 8.1 | 0.8 % | ||
| CVE-2026-15556 | | Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions | HIGH 8.1 | 0.3 % | ||
| CVE-2026-15555 | | Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller | HIGH 8.8 | 0.9 % | ||
| CVE-2026-15554 | | Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery | HIGH 7.4 | 0.6 % | ||
| CVE-2026-10579 | | Picketlink-federation: auth bypass in picketlink saml unsolicited-response | CRITICAL 9.8 | 0.5 % |