Red Hat Security AdvisoryRHSA-2026:33372
Red Hat JBoss Enterprise Application Platform 7.1.15 security update
Released 2026-06-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server eap7-apache-cxf-3.1.16-7.redhat_00007.1.ep7.el7, eap7-apache-cxf-rt-3.1.16-7.redhat_00007.1.ep7.el7, eap7-apache-cxf-services-3.1.16-7.redhat_00007.1.ep7.el7 +2
Fixes 3 records
Priority HIGH 76
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01333 · Published 2026-01-07 · Partial fix · 1.4.18-21.SP19_redhat_00001.1.ep7.el7, 2.0.41-8.SP9_redhat_00001.1.el7eap +50 CWE-20
Priority MEDIUM 43
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02325 · Published 2025-09-02 · Partial fix · 2.2.38.Final, 1.4.18-21.SP19_redhat_00001.1.ep7.el7 +50 CWE-770
Priority LOW 37
A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02194 · Published 2025-01-21 · Partial fix · 3.5.10, 3.6.5 +1 CWE-400
