Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-85511 | | Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 | MEDIUM 4.2 | 0.3 % | ||
| CVE-2026-10832 | | Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-86404 | | Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers … | HIGH 8.8 | 0.7 % | ||
| CVE-2026-5680 | | Undertow-core: undertow: denial of service via websocket permessage-deflate processing | HIGH 7.5 | 1.1 % | ||
| CVE-2026-14180 | | Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap | MEDIUM 5.3 | 1.0 % | ||
| CVE-2026-28369 | fixed in 0:2.40.0-7.redhat_00015.1.el8eap | Undertow: undertow: request smuggling via malformed http request headers | CRITICAL 9.1 | 0.7 % | ||
| CVE-2026-28367 | fixed in 0:2.40.0-7.redhat_00015.1.el8eap | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator | CRITICAL 9.1 | 0.7 % | ||
| CVE-2026-28368 | fixed in 0:2.40.0-7.redhat_00015.1.el8eap | Undertow: undertow: request smuggling via inconsistent header parsing | CRITICAL 9.1 | 0.7 % | ||
| CVE-2025-12543 | | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | CRITICAL 9.6 | 1.3 % | ||
| CVE-2024-3884 | | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | HIGH 7.5 | 1.4 % | ||
| CVE-2025-9784 | | Undertow: undertow madeyoureset http/2 ddos vulnerability | HIGH 7.5 | 2.3 % | ||
| CVE-2025-23368 | fixed in 0:8.1.6-5.GA_redhat_00007.1.el8eap | Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli | HIGH 8.1 | 0.9 % |