RH
Product
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
by Red Hat · last CVE Apr 7, 2025
18
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 6Low 0
Watch

Add Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1973
7.5
1%
Nov 7
Undertow: unrestricted request storage leads to memory exhaustion
Affected: All versions, or not specified
CVE-2024-7885
7.5
3%
Aug 21
Undertow: improper state management in proxy protocol parsing causes information leakage
Affected: All versions, or not specified
CVE-2024-5971
7.5
3%
Jul 8
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
Affected: All versions, or not specified
CVE-2023-5685
7.5
3%
Mar 22
Xnio: stackoverflowexception when the chain of notifier states becomes problematically big
Affected: All versions, or not specified
CVE-2024-1635
7.5
5%
Feb 19
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Affected: All versions, or not specified
CVE-2023-4503
7.5
1%
Feb 6
Eap-galleon: custom provisioning creates unsecured http-invoker
Affected: All versions, or not specified
CVE-2023-3171
7.5
1%
Dec 27
Eap-7: heap exhaustion via deserialization
Affected: All versions, or not specified
CVE-2023-3223
7.5
3%
Sep 27
Undertow: outofmemoryerror due to @multipartconfig handling
Affected: All versions, or not specified
CVE-2023-1108
7.5
2%
Sep 14
Undertow: infinite loop in sslconduit during close
Affected: All versions, or not specified
CVE-2023-4639
7.4
1%
Nov 17
Undertow: cookie smuggling/spoofing
Affected: All versions, or not specified
CVE-2024-10234
7.3
1%
Oct 22
Wildfly: wildfly vulnerable to cross-site scripting (xss)
Affected: All versions, or not specified
CVE-2024-1233
7.3
1%
Apr 9
Eap: wildfly-elytron has a ssrf security issue
Affected: All versions, or not specified
Showing 12