Red Hat Security Advisory

RHSA-2025:13686

Red Hat JBoss Web Server 6.1.2 release and security update

Released 2025-08-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 6.1.2

Fixes 2 records

TI-2025-31117 CVE-2025-48989 · GHSA-gqp3-2cvr-x8m3

Apache Tomcat: h2 DoS - Made You Reset

MEDIUM 45

Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03768 Published 2025-08-13 Partial fix · 11.0.10, 10.1.44 +1 CWE-404

TI-2025-32628 CVE-2025-52520 · GHSA-wr62-c79q-cv37

Apache Tomcat: DoS via integer overflow in multipart file upload

MEDIUM 43

For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02198 Published 2025-07-10 Partial fix · 11.0.9, 10.1.43 +1 CWE-190