RH
Product
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
39
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 30Medium 1Low 0
Watch
Add Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47691 | 10.0 | Jun 12 | Netty has Insufficient Bailiwick Validation for NS Records Affected: All versions, or not specified |
| CVE-2026-45674 | 10.0 | Jun 12 | Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records Affected: All versions, or not specified |
| CVE-2026-10579 | 9.8 | Aug 11 | Picketlink-federation: auth bypass in picketlink saml unsolicited-response Affected: All versions, or not specified |
| CVE-2026-42581 | 9.8 | May 13 | Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization Affected: All versions, or not specified |
| CVE-2026-27446 | 9.8 | Mar 4 | Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation Affected: All versions, or not specified |
| CVE-2025-12543 | 9.6 | Jan 7 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf Affected: All versions, or not specified |
| CVE-2026-42584 | 9.1 | May 13 | Netty: HttpClientCodec response desynchronization Affected: All versions, or not specified |
| CVE-2026-42579 | 9.1 | May 13 | Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) Affected: All versions, or not specified |
Showing 8