Red Hat Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

• CVE-2026-0603 High 8.3 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 1.0%
• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2024-3884 High 7.5 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 1.5%
• CVE-2025-9784 High 7.5 Undertow: undertow madeyoureset http/2 ddos vulnerability 2.3%
• CVE-2025-23368 High 8.1 Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 0.9%
• CVE-2024-7885 High 7.5 Undertow: improper state management in proxy protocol parsing causes information leakage 2.6%
• CVE-2024-1233 High 7.3 Eap: wildfly-elytron has a ssrf security issue 0.8%
• CVE-2023-5685 High 7.5 Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 3.5%
• CVE-2024-1635 High 7.5 Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 4.6%
• CVE-2023-5379 High 7.5 Undertow: ajp request closes connection exceeding maxrequestsize 1.0%