Red Hat Security AdvisoryRHSA-2026:6012
Red Hat JBoss Enterprise Application Platform 7.1.14 security update
Released 2026-03-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server eap7-apache-cxf-3.1.16-6.redhat_00006.1.ep7.el7, eap7-apache-cxf-rt-3.1.16-6.redhat_00006.1.ep7.el7, eap7-apache-cxf-services-3.1.16-6.redhat_00006.1.ep7.el7 +11
Fixes 3 records
Priority MEDIUM 51
If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01072 · Published 2025-08-08 · Partial fix · 4.1.3, 4.0.9 +1 CWE-20
Priority MEDIUM 42
A flaw was found in Undertow that can cause remote denial of service attacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01457 · Published 2025-12-03 · Partial fix · 1.4.18-19.SP17_redhat_00001.1.ep7.el7, 7.1.14-4.GA_redhat_00003.1.ep7.el7 +49 CWE-20
Priority MEDIUM 40
A flaw was found in Hibernate.
CVSS 3.1HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.01032 · Published 2026-01-23 · Partial fix · 5.1.17-4.Final_redhat_00005.1.ep7.el7, 7.1.14-4.GA_redhat_00003.1.ep7.el7 +13 CWE-89
