Read the docs
Red Hat Security Advisory

RHSA-2021:0874

Red Hat JBoss Enterprise Application Platform 7.3.6 security update

Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

Priority LOW 29

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01089 Published 2021-06-02 Partial fix · 5.0.20.Final CWE-400
Priority LOW 25

A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.01231 Published 2020-09-23 Partial fix · 2.2.0.Final CWE-444
TI-2021-03516 CVE-2021-20220 · GHSA-qjwc-v72v-fq6r

A flaw was found in Undertow.

Priority LOW 24

A flaw was found in Undertow.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.012 Published 2021-02-23 Partial fix · 2.1.6, 2.0.34 CWE-444
TI-2021-03542 CVE-2021-20250 · GHSA-2259-h742-5vr4

Information disclosure in wildfly

Priority LOW 21

A flaw was found in wildfly.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00743 Published 2021-05-13 Partial fix · 4.0.39 CWE-200
TI-2020-07155 CVE-2020-8908 · GHSA-5mg8-w23w-74h3

Temp directory permission issue in Guava

Priority LOW 18

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.F…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00924 Published 2020-12-10 Partial fix · 32.0, 32.0.0-android CWE-378