RH
Product
Red Hat JBoss Enterprise Application Platform 8
44
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 4High 22Medium 13Low 5
Watch
Add Red Hat JBoss Enterprise Application Platform 8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49875 | 9.8 | Jun 12 | Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils Affected: All versions, or not specified |
| CVE-2026-28369 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via malformed http request headers Affected: All versions, or not specified |
| CVE-2026-28367 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator Affected: All versions, or not specified |
| CVE-2026-28368 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via inconsistent header parsing Affected: All versions, or not specified |
Showing 4