Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-85511 | corrigé en 0:2.40.0-8.redhat_00024.1.el10eap | Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 | MEDIUM 4.2 | 0.3 % | ||
| CVE-2026-10832 | corrigé en 0:2.40.0-8.redhat_00024.1.el10eap | Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-86404 | corrigé en 0:2.40.0-8.redhat_00024.1.el10eap | Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers … | HIGH 8.8 | 0.7 % | ||
| CVE-2026-5680 | corrigé en 0:2.40.0-8.redhat_00024.1.el10eap | Undertow-core: undertow: denial of service via websocket permessage-deflate processing | HIGH 7.5 | 1.1 % | ||
| CVE-2026-14180 | corrigé en 0:2.40.0-8.redhat_00024.1.el10eap | Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap | MEDIUM 5.3 | 1.0 % | ||
| CVE-2026-15567 | | Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener | HIGH 7.5 | 1.0 % | ||
| CVE-2026-15565 | | Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method | HIGH 7.5 | 1.2 % | ||
| CVE-2026-15563 | | Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos | HIGH 7.4 | 0.7 % | ||
| CVE-2026-15562 | | Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service | HIGH 7.5 | 1.0 % | ||
| CVE-2026-15561 | | Undertow-core: oom via missing limits in chunked trailer in eap's undertow | HIGH 7.5 | 0.8 % | ||
| CVE-2026-15560 | | Openjdk-orb: unauthed class loading via iiop in eap | HIGH 8.1 | 0.8 % | ||
| CVE-2026-15555 | | Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller | HIGH 8.8 | 0.9 % | ||
| CVE-2026-15554 | | Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery | HIGH 7.4 | 0.6 % | ||
| CVE-2025-12799 | corrigé en 0:1-9.el10eap | Jastow: jastow cross-site scripting attack due to unsanitized uri | MEDIUM 6.5 | 0.4 % |