Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2024-3884 High 7.5 Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 1.5%
• CVE-2025-9784 High 7.5 Undertow: undertow madeyoureset http/2 ddos vulnerability 2.3%
• CVE-2025-2251 Medium 6.2 Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 1.1%
• CVE-2025-23367 Medium 6.5 Org.wildfly.core:wildfly-server: wildfly improper rbac permission 0.8%
• CVE-2024-8447 Medium 5.9 Narayana: deadlock via multiple join requests sent to lra coordinator 0.7%
• CVE-2023-4639 High 7.4 Undertow: cookie smuggling/spoofing 1.1%
• CVE-2023-1973 High 7.5 Undertow: unrestricted request storage leads to memory exhaustion 1.3%
• CVE-2024-8883 Medium 6.1 Keycloak: vulnerable redirect uri validation results in open redirec 2.1%
• CVE-2024-8698 High 7.7 Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak 2.0%
• CVE-2024-7885 High 7.5 Undertow: improper state management in proxy protocol parsing causes information leakage 2.6%
• CVE-2024-1102 Medium 6.5 Jberet: jberet-core logging database credentials 0.8%
• CVE-2023-6236 High 7.3 Eap: oidc app attempting to access the second tenant, the user should be prompted to log 0.3%