Red Hat Security Advisory

RHSA-2025:10459

Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

Released 2025-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 8.0.8

Fixes 4 records

TI-2025-30956 CVE-2025-48734 · GHSA-wxr5-93ph-8wr9

Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

HIGH 73

Improper Access Control vulnerability in Apache Commons.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02018 Published 2025-05-28 Partial fix · 1.11.0, 2.0.0-M2 CWE-284

TI-2025-20420 CVE-2025-27611 · GHSA-xq7p-g2vc-g82p

base-x homograph attack allows Unicode lookalike characters to bypass validation.

LOW 38

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00449 Published 2025-04-30 Fixed in 3.0.11, 5.0.1 +1 CWE-1007

TI-2025-01976 CVE-2025-2251 · GHSA-6839-6896-r9mx

Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

LOW 38

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism.

CVSS 3.1MEDIUM 6.2 Network High privileges No interaction EPSS 0.01064 Published 2025-04-07 Fixed in 36.0.0, 2.16.0-21.redhat_00055.1.el8eap +73 CWE-502

TI-2025-16969 CVE-2025-23184 · GHSA-fh5r-crhr-qrrq

Apache CXF: Denial of Service vulnerability with temporary files

LOW 37

A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02194 Published 2025-01-21 Partial fix · 3.5.10, 3.6.5 +1 CWE-400