Red Hat Security Advisory

RHSA-2026:12194

Red Hat JBoss Web Server 6.2.2 release and security update

Released 2026-04-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 6.2 on RHEL 10 jws6-tomcat-10.1.49-10.redhat_00008.1.el10jws, jws6-tomcat-admin-webapps-10.1.49-10.redhat_00008.1.el10jws, jws6-tomcat-docs-webapp-10.1.49-10.redhat_00008.1.el10jws +7
Red Hat JBoss Web Server 6.2 on RHEL 8 jws6-tomcat-10.1.49-10.redhat_00008.1.el8jws, jws6-tomcat-admin-webapps-10.1.49-10.redhat_00008.1.el8jws, jws6-tomcat-docs-webapp-10.1.49-10.redhat_00008.1.el8jws +7
Red Hat JBoss Web Server 6.2 on RHEL 9 jws6-tomcat-10.1.49-10.redhat_00008.1.el9jws, jws6-tomcat-admin-webapps-10.1.49-10.redhat_00008.1.el9jws, jws6-tomcat-docs-webapp-10.1.49-10.redhat_00008.1.el9jws +7

TI-2025-41013 CVE-2025-66614 · GHSA-fpj8-gq4v-p354

LOW 39

Improper Input Validation vulnerability.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00274 Published 2026-02-17 Partial fix · 11.0.15, 10.1.50 +1 CWE-20

TI-2026-25438 CVE-2026-32990 · GHSA-8mc5-53m5-3qj2

LOW 30

Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-04-09 Partial fix · 9.0.116, 10.1.53 +1 CWE-20

TI-2026-19938 CVE-2026-24733 · GHSA-qq5r-98hh-rxc9

LOW 30

Improper Input Validation vulnerability in Apache Tomcat.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00552 Published 2026-02-17 Partial fix · 11.0.15, 10.1.50 +1 CWE-20