Vulnerability Database
Blog
FAQ
Docs
RHSA-2025:4549
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2025:4549
Import Source
https://security.access.redhat.com/data/osv/RHSA-2025:4549.json
JSON Data
https://api.test.osv.dev/v1/vulns/RHSA-2025:4549
Published
2025-05-07T10:05:45Z
Modified
2025-05-16T10:03:29Z
Upstream
CVE-2025-24970
CVE-2025-23367
CVE-2024-47535
CVE-2025-25193
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update
Details
References
https://access.redhat.com/errata/RHSA-2025:4549
https://access.redhat.com/security/updates/classification/#important
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
https://bugzilla.redhat.com/show_bug.cgi?id=2325538
https://bugzilla.redhat.com/show_bug.cgi?id=2337620
https://bugzilla.redhat.com/show_bug.cgi?id=2344787
https://bugzilla.redhat.com/show_bug.cgi?id=2344788
https://issues.redhat.com/browse/JBEAP-28786
https://issues.redhat.com/browse/JBEAP-28809
https://issues.redhat.com/browse/JBEAP-28843
https://issues.redhat.com/browse/JBEAP-28989
https://issues.redhat.com/browse/JBEAP-29003
https://issues.redhat.com/browse/JBEAP-29311
https://issues.redhat.com/browse/JBEAP-29488
https://issues.redhat.com/browse/JBEAP-29539
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4549.json
https://access.redhat.com/security/cve/CVE-2024-47535
https://www.cve.org/CVERecord?id=CVE-2024-47535
https://nvd.nist.gov/vuln/detail/CVE-2024-47535
https://github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
https://access.redhat.com/security/cve/CVE-2025-23367
https://www.cve.org/CVERecord?id=CVE-2025-23367
https://nvd.nist.gov/vuln/detail/CVE-2025-23367
https://github.com/advisories/GHSA-qr6x-62gq-4ccp
https://access.redhat.com/security/cve/CVE-2025-24970
https://www.cve.org/CVERecord?id=CVE-2025-24970
https://nvd.nist.gov/vuln/detail/CVE-2025-24970
https://github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
https://github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
https://access.redhat.com/security/cve/CVE-2025-25193
https://www.cve.org/CVERecord?id=CVE-2025-25193
https://nvd.nist.gov/vuln/detail/CVE-2025-25193
https://github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
https://github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx
Affected packages
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-apache-commons-io
Package
Name
eap7-apache-commons-io
Purl
pkg:rpm/redhat/eap7-apache-commons-io
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.16.1-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hal-console
Package
Name
eap7-hal-console
Purl
pkg:rpm/redhat/eap7-hal-console
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.3.26-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar
Package
Name
eap7-ironjacamar
Purl
pkg:rpm/redhat/eap7-ironjacamar
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-common-api
Package
Name
eap7-ironjacamar-common-api
Purl
pkg:rpm/redhat/eap7-ironjacamar-common-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-common-impl
Package
Name
eap7-ironjacamar-common-impl
Purl
pkg:rpm/redhat/eap7-ironjacamar-common-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-common-spi
Package
Name
eap7-ironjacamar-common-spi
Purl
pkg:rpm/redhat/eap7-ironjacamar-common-spi
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-core-api
Package
Name
eap7-ironjacamar-core-api
Purl
pkg:rpm/redhat/eap7-ironjacamar-core-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-core-impl
Package
Name
eap7-ironjacamar-core-impl
Purl
pkg:rpm/redhat/eap7-ironjacamar-core-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-deployers-common
Package
Name
eap7-ironjacamar-deployers-common
Purl
pkg:rpm/redhat/eap7-ironjacamar-deployers-common
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-jdbc
Package
Name
eap7-ironjacamar-jdbc
Purl
pkg:rpm/redhat/eap7-ironjacamar-jdbc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-ironjacamar-validator
Package
Name
eap7-ironjacamar-validator
Purl
pkg:rpm/redhat/eap7-ironjacamar-validator
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.5.19-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jboss-remoting
Package
Name
eap7-jboss-remoting
Purl
pkg:rpm/redhat/eap7-jboss-remoting
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.0.31-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jboss-server-migration
Package
Name
eap7-jboss-server-migration
Purl
pkg:rpm/redhat/eap7-jboss-server-migration
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.10.0-41.Final_redhat_00041.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jboss-server-migration-cli
Package
Name
eap7-jboss-server-migration-cli
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.10.0-41.Final_redhat_00041.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jboss-server-migration-core
Package
Name
eap7-jboss-server-migration-core
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.10.0-41.Final_redhat_00041.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-core
Package
Name
eap7-weld-core
Purl
pkg:rpm/redhat/eap7-weld-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-core-impl
Package
Name
eap7-weld-core-impl
Purl
pkg:rpm/redhat/eap7-weld-core-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-core-jsf
Package
Name
eap7-weld-core-jsf
Purl
pkg:rpm/redhat/eap7-weld-core-jsf
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-ejb
Package
Name
eap7-weld-ejb
Purl
pkg:rpm/redhat/eap7-weld-ejb
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-jta
Package
Name
eap7-weld-jta
Purl
pkg:rpm/redhat/eap7-weld-jta
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-probe-core
Package
Name
eap7-weld-probe-core
Purl
pkg:rpm/redhat/eap7-weld-probe-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-weld-web
Package
Name
eap7-weld-web
Purl
pkg:rpm/redhat/eap7-weld-web
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.11-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly
Package
Name
eap7-wildfly
Purl
pkg:rpm/redhat/eap7-wildfly
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-elytron
Package
Name
eap7-wildfly-elytron
Purl
pkg:rpm/redhat/eap7-wildfly-elytron
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.15.25-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-elytron-tool
Package
Name
eap7-wildfly-elytron-tool
Purl
pkg:rpm/redhat/eap7-wildfly-elytron-tool
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.15.25-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk11
Package
Name
eap7-wildfly-java-jdk11
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk11
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk17
Package
Name
eap7-wildfly-java-jdk17
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk17
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk8
Package
Name
eap7-wildfly-java-jdk8
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk8
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-javadocs
Package
Name
eap7-wildfly-javadocs
Purl
pkg:rpm/redhat/eap7-wildfly-javadocs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-modules
Package
Name
eap7-wildfly-modules
Purl
pkg:rpm/redhat/eap7-wildfly-modules
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.22-2.GA_redhat_00001.1.el8eap
RHSA-2025:4549 - OSV