Red Hat Security AdvisoryRHSA-2026:3892
Red Hat JBoss Enterprise Application Platform 8.0.12 security update
Released 2026-03-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 8.0
Fixes 3 records
Priority HIGH 76
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.01333 · Published 2026-01-07 · Partial fix · 1.4.18-21.SP19_redhat_00001.1.ep7.el7, 2.0.41-8.SP9_redhat_00001.1.el7eap +50 CWE-20
Priority MEDIUM 43
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02325 · Published 2025-09-02 · Partial fix · 2.2.38.Final, 1.4.18-21.SP19_redhat_00001.1.ep7.el7 +50 CWE-770
Priority MEDIUM 42
A flaw was found in Undertow that can cause remote denial of service attacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01457 · Published 2025-12-03 · Partial fix · 1.4.18-19.SP17_redhat_00001.1.ep7.el7, 7.1.14-4.GA_redhat_00003.1.ep7.el7 +49 CWE-20
