Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
RHSA-2025:16668
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2025:16668
Import Source
https://security.access.redhat.com/data/osv/RHSA-2025:16668.json
JSON Data
https://api.test.osv.dev/v1/vulns/RHSA-2025:16668
Upstream
CVE-2020-10705
CVE-2023-44487
CVE-2024-27316
CVE-2024-4109
CVE-2024-51127
CVE-2025-48734
Related
GO-2023-2102
Published
2025-09-25T10:18:44Z
Modified
2025-10-25T10:21:21Z
Severity
8.8 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.12 on RHEL 7 security update
Details
References
https://access.redhat.com/errata/RHSA-2025:16668
https://access.redhat.com/security/updates/classification/#important
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index
https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
https://bugzilla.redhat.com/show_bug.cgi?id=1803241
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2268277
https://bugzilla.redhat.com/show_bug.cgi?id=2272325
https://bugzilla.redhat.com/show_bug.cgi?id=2323697
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
https://issues.redhat.com/browse/JBEAP-30484
https://issues.redhat.com/browse/JBEAP-30522
https://issues.redhat.com/browse/JBEAP-30523
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16668.json
https://access.redhat.com/security/cve/CVE-2020-10705
https://www.cve.org/CVERecord?id=CVE-2020-10705
https://nvd.nist.gov/vuln/detail/CVE-2020-10705
https://access.redhat.com/security/cve/CVE-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-44487
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://github.com/dotnet/announcements/issues/277
https://pkg.go.dev/vuln/GO-2023-2102
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://access.redhat.com/security/cve/CVE-2024-4109
https://www.cve.org/CVERecord?id=CVE-2024-4109
https://nvd.nist.gov/vuln/detail/CVE-2024-4109
https://github.com/undertow-io/undertow/pull/1668#
https://access.redhat.com/security/cve/CVE-2024-27316
https://www.cve.org/CVERecord?id=CVE-2024-27316
https://nvd.nist.gov/vuln/detail/CVE-2024-27316
https://httpd.apache.org/security/vulnerabilities_24.html
https://nowotarski.info/http2-continuation-flood/
https://www.kb.cert.org/vuls/id/421644
https://access.redhat.com/security/cve/CVE-2024-51127
https://www.cve.org/CVERecord?id=CVE-2024-51127
https://nvd.nist.gov/vuln/detail/CVE-2024-51127
http://hornetq.com
https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md
https://access.redhat.com/security/cve/CVE-2025-48734
https://www.cve.org/CVERecord?id=CVE-2025-48734
https://nvd.nist.gov/vuln/detail/CVE-2025-48734
https://github.com/advisories/GHSA-wxr5-93ph-8wr9
https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
https://www.openwall.com/lists/oss-security/2025/05/28/6
Affected packages
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
eap7-apache-commons-beanutils
Package
Name
eap7-apache-commons-beanutils
Purl
pkg:rpm/redhat/eap7-apache-commons-beanutils
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.11.0-1.redhat_00001.1.ep7.el7
eap7-hibernate-validator
Package
Name
eap7-hibernate-validator
Purl
pkg:rpm/redhat/eap7-hibernate-validator
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.6-1.SP1_redhat_00001.1.ep7.el7
eap7-hibernate-validator-cdi
Package
Name
eap7-hibernate-validator-cdi
Purl
pkg:rpm/redhat/eap7-hibernate-validator-cdi
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.6-1.SP1_redhat_00001.1.ep7.el7
eap7-hornetq
Package
Name
eap7-hornetq
Purl
pkg:rpm/redhat/eap7-hornetq
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.ep7.el7
eap7-hornetq-commons
Package
Name
eap7-hornetq-commons
Purl
pkg:rpm/redhat/eap7-hornetq-commons
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.ep7.el7
eap7-hornetq-core-client
Package
Name
eap7-hornetq-core-client
Purl
pkg:rpm/redhat/eap7-hornetq-core-client
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.ep7.el7
eap7-hornetq-jms-client
Package
Name
eap7-hornetq-jms-client
Purl
pkg:rpm/redhat/eap7-hornetq-jms-client
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.ep7.el7
eap7-undertow
Package
Name
eap7-undertow
Purl
pkg:rpm/redhat/eap7-undertow
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.4.18-17.SP15_redhat_00001.1.ep7.el7
eap7-wildfly
Package
Name
eap7-wildfly
Purl
pkg:rpm/redhat/eap7-wildfly
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.1.12-2.GA_redhat_00002.1.ep7.el7
eap7-wildfly-modules
Package
Name
eap7-wildfly-modules
Purl
pkg:rpm/redhat/eap7-wildfly-modules
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.1.12-2.GA_redhat_00002.1.ep7.el7
RHSA-2025:16668 - OSV