Red Hat Security Advisory

RHSA-2021:4676

Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7

Released 2021-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-apache-sshd-2.7.0-1.redhat_00001.1.el7eap, eap7-jsoup-1.14.2-1.redhat_00002.1.el7eap, eap7-resteasy-3.15.2-1.Final_redhat_00001.1.el7eap +24

TI-2021-15589 CVE-2021-37714 · GHSA-m72m-mhq2-9p6c

MEDIUM 48

jsoup is a Java library for working with HTML.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06689 Published 2021-08-18 Partial fix · 1.14.2 CWE-248

TI-2021-10677 CVE-2021-30129 · GHSA-9279-7hph-r3xw

LOW 34

A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03049 Published 2021-07-12 Partial fix · 2.7.0 CWE-772

TI-2021-02651 CVE-2021-3717 · GHSA-p9xf-3rm3-qh2h

LOW 34

A flaw was found in Wildfly.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00315 Published 2022-05-24 Partial fix · 17.0 CWE-552

TI-2021-02574 CVE-2021-3629 · GHSA-rf6q-vx79-mjxr

LOW 29

A flaw was found in Undertow.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01322 Published 2022-05-24 Partial fix · 2.0.40.Final, 2.2.11.Final CWE-400

TI-2021-03579 CVE-2021-20289 · GHSA-244r-fcj3-ghjq

LOW 27

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.014 Published 2021-03-26 Partial fix · 4.6.1, 4.5.10 +1 CWE-209