TI-2025-30956 CVE-2025-48734 · GHSA-wxr5-93ph-8wr9
Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
Priority HIGH 73
Improper Access Control vulnerability in Apache Commons.
RHSA-2025:10931
Red Hat JBoss Enterprise Application Platform 7.4.23 Security update
Released 2025-07-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7
Fixes 6 records
TI-2025-24565 CVE-2025-35036 · GHSA-7v6m-28jr-rg84
hibernate-validator insecure default Expression Language interpolation
Priority MEDIUM 64
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language.
TI-2025-01976 CVE-2025-2251 · GHSA-6839-6896-r9mx
Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution
Priority LOW 38
A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism.
TI-2025-16969 CVE-2025-23184 · GHSA-fh5r-crhr-qrrq
Apache CXF: Denial of Service vulnerability with temporary files
Priority LOW 37
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6.
TI-2024-09490 CVE-2024-10234 · GHSA-w22f-vwwp-37pr
Wildfly: wildfly vulnerable to cross-site scripting (xss)
Priority LOW 35
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system.
TI-2025-17141 CVE-2025-23366 · GHSA-jhvj-f397-8w6q
Org.jboss.hal:hal-console: wildfly hal console cross-site scripting
Priority LOW 31
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users.