Red Hat Security AdvisoryRHSA-2025:4552
Red Hat JBoss Enterprise Application Platform 7.4.22 security update
Released 2025-05-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.4.22 commons-io.commons-io-2.16.1.redhat-00001.jar, io.netty.netty-common-4.1.119.Final-redhat-00004.jar, io.netty.netty-handler-4.1.119.Final-redhat-00004.jar +1
Fixes 5 records
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority MEDIUM 58
Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00391 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-400
Priority MEDIUM 58
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00408 · Published 2024-11-12 · Fixed in 4.1.115, 4.1.115.Final CWE-400
Priority LOW 30
A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2025-01-30 · Partial fix · 27.0.1.Final, 28.0.0.Beta2 +32 CWE-284
Priority LOW 23
Uncontrolled Resource Consumption vulnerability in Apache Commons IO.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.01315 · Published 2024-10-03 · Partial fix · 2.14.0 CWE-400
THREATIST.IORead the docs