Red Hat Red Hat JBoss Enterprise Application Platform

• CVE-2025-23367 Medium 6.5 Org.wildfly.core:wildfly-server: wildfly improper rbac permission 0.8%
• CVE-2024-7885 High 7.5 Undertow: improper state management in proxy protocol parsing causes information leakage 2.6%
• CVE-2024-3653 Medium 5.3 Undertow: learningpushhandler can lead to remote memory dos attacks 1.9%
• CVE-2024-5971 High 7.5 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 2.9%
• CVE-2024-4029 Medium 4.1 Wildfly: no timeout for eap management interface may lead to denial of service (dos) 0.3%
• CVE-2024-1233 High 7.3 Eap: wildfly-elytron has a ssrf security issue 0.8%
• CVE-2023-5685 High 7.5 Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 3.5%
• CVE-2023-4061 Medium 6.5 Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor 1.0%