Read the docs
Red Hat Security Advisory

RHSA-2025:4437

Red Hat JBoss Enterprise Application Platform 7.3.13 security update

Released 2025-05-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 8 records

TI-2022-19041 CVE-2022-40152 · GHSA-3f7h-mf4q-vrm4

Stack Buffer Overflow in Woodstox

Priority HIGH 66

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18215 Published 2022-09-16 Partial fix · 6.4.0, 5.4.0 CWE-121
TI-2022-08598 CVE-2022-24785 · GHSA-8hfj-j24r-96c4

Path Traversal in Moment.js

Priority MEDIUM 54

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1384 Published 2022-04-04 Partial fix · 2.29.2 CWE-22
TI-2022-09231 CVE-2022-25647 · GHSA-4jrv-ppp4-jm57

Deserialization of untrusted data in com.google.code.gson:gson

Priority MEDIUM 50

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.1223 Published 2022-05-01 Partial fix · 2.8.9 CWE-502
TI-2022-09423 CVE-2022-25857 · GHSA-3mc7-4q67-w48m

Denial of service (DoS) in org.yaml:snakeyaml

Priority LOW 38

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02932 Published 2022-08-30 Partial fix · 1.31 CWE-776
TI-2022-07892 CVE-2022-23913 · GHSA-pr38-qpxm-g88x

Apache ActiveMQ Artemis DoS

Priority LOW 38

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0274 Published 2022-02-04 Partial fix · 2.20.0, 2.19.1 CWE-770
TI-2022-19039 CVE-2022-40150 · GHSA-x27m-9w8j-5vcw

Stack Buffer Overflow in Jettison

Priority LOW 36

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01647 Published 2022-09-16 Partial fix · 1.5.2 CWE-400
TI-2022-19038 CVE-2022-40149 · GHSA-56h3-78gp-v83r

Stack Buffer Overflow in Jettison

Priority LOW 36

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01677 Published 2022-09-16 Partial fix · 1.5.1 CWE-121
TI-2022-00035 CVE-2022-0084 · GHSA-76fg-mhrg-fmmg

Resource allocation without limits in xnio

Priority LOW 36

A flaw was found in XNIO, specifically in the notifyReadClosed method.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01583 Published 2022-08-26 Partial fix CWE-770