Red Hat Security AdvisoryRHSA-2025:16667
Red Hat JBoss Enterprise Application Platform 7.3.15 security update
Released 2025-09-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server eap7-apache-commons-beanutils-1.11.0-1.redhat_00001.1.el7eap, eap7-hornetq-2.4.11-1.Final_redhat_00001.1.el7eap, eap7-hornetq-commons-2.4.11-1.Final_redhat_00001.1.el7eap +30
Fixes 4 records
Priority HIGH 81
HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.88755 · Published 2024-04-04 · Partial fix CWE-770
Priority HIGH 73
Improper Access Control vulnerability in Apache Commons.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02018 · Published 2025-05-28 · Partial fix · 1.11.0, 2.0.0-M2 CWE-284
Priority MEDIUM 48
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00671 · Published 2024-11-04 · Partial fix CWE-22
Priority LOW 38
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2024-08-21 · Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362
THREATIST.IORead the docs