Red Hat Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

• CVE-2025-2251 Medium 6.2 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 1.1%
• CVE-2025-23367 Medium 6.5 Org.wildfly.core:wildfly-server: wildfly improper rbac permission 0.8%
• CVE-2023-4639 High 7.4 Undertow: cookie smuggling/spoofing 1.1%
• CVE-2023-1973 High 7.5 Undertow: unrestricted request storage leads to memory exhaustion 1.3%
• CVE-2024-10234 Medium 6.1 Wildfly: wildfly vulnerable to cross-site scripting (xss) 0.7%
• CVE-2024-7885 High 7.5 Undertow: improper state management in proxy protocol parsing causes information leakage 2.6%
• CVE-2024-3653 Medium 5.3 Undertow: learningpushhandler can lead to remote memory dos attacks 1.9%
• CVE-2024-5971 High 7.5 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 2.9%
• CVE-2024-4029 Medium 4.1 Wildfly: no timeout for eap management interface may lead to denial of service (dos) 0.3%
• CVE-2024-1233 High 7.3 Eap: wildfly-elytron has a ssrf security issue 0.8%
• CVE-2023-5685 High 7.5 Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 3.5%
• CVE-2024-1635 High 7.5 Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 4.6%
• CVE-2024-1459 Medium 5.3 Undertow: directory traversal vulnerability 1.7%
• CVE-2023-4503 Medium 6.8 Eap-galleon: custom provisioning creates unsecured http-invoker 0.7%
• CVE-2023-3171 High 7.5 Eap-7: heap exhaustion via deserialization 1.0%
• CVE-2023-4061 Medium 6.5 Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor 1.0%
• CVE-2023-3223 High 7.5 Undertow: outofmemoryerror due to @multipartconfig handling 2.7%
• CVE-2023-1108 High 7.5 Undertow: infinite loop in sslconduit during close 1.8%