Red Hat Security AdvisoryRHSA-2026:6011
Red Hat JBoss Enterprise Application Platform 7.3.17 security update
Released 2026-03-30 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server eap7-apache-cxf-3.4.10-3.SP2_redhat_00003.1.el7eap, eap7-apache-cxf-rt-3.4.10-3.SP2_redhat_00003.1.el7eap, eap7-apache-cxf-services-3.4.10-3.SP2_redhat_00003.1.el7eap +14
Fixes 4 records
Priority MEDIUM 63
In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git p…
CVSS 4.0MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.00844 · Published 2025-05-21 · Partial fix · 7.2.1.202505142326-r, 7.1.1.202505221757-r +4 CWE-611
Priority MEDIUM 51
If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01072 · Published 2025-08-08 · Partial fix · 4.1.3, 4.0.9 +1 CWE-20
Priority MEDIUM 42
A flaw was found in Undertow that can cause remote denial of service attacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01457 · Published 2025-12-03 · Partial fix · 1.4.18-19.SP17_redhat_00001.1.ep7.el7, 7.1.14-4.GA_redhat_00003.1.ep7.el7 +49 CWE-20
Priority MEDIUM 40
A flaw was found in Hibernate.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01032 · Published 2026-01-23 · Partial fix · 5.1.17-4.Final_redhat_00005.1.ep7.el7, 7.1.14-4.GA_redhat_00003.1.ep7.el7 +13 CWE-89
THREATIST.IORead the docs