RH
Product
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
by Red Hat · last CVE Feb 11, 2026
11
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 1Low 1
Watch

Add Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12543
9.6
1%
Jan 7
Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf
Affected: All versions, or not specified
CVE-2026-0603
8.3
1%
Jan 23
Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection
Affected: All versions, or not specified
CVE-2026-24842
8.2
1%
Jan 28
node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
Affected: All versions, or not specified
CVE-2025-23368
8.1
1%
Mar 4
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
Affected: All versions, or not specified
CVE-2024-3884
7.5
1%
Dec 3
Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded
Affected: All versions, or not specified
CVE-2025-9784
7.5
2%
Sep 2
Undertow: undertow madeyoureset http/2 ddos vulnerability
Affected: All versions, or not specified
CVE-2024-7885
7.5
3%
Aug 21
Undertow: improper state management in proxy protocol parsing causes information leakage
Affected: All versions, or not specified
CVE-2024-1635
7.5
5%
Feb 19
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
Affected: All versions, or not specified
CVE-2024-1233
7.3
1%
Apr 9
Eap: wildfly-elytron has a ssrf security issue
Affected: All versions, or not specified
CVE-2025-13465
5.3
2%
Jan 21
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Affected: All versions, or not specified
CVE-2025-69873
2.9
1%
Feb 11
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled
Affected: All versions, or not specified
Showing 11