RH
Product
Red Hat JBoss Enterprise Application Platform Expansion Pack
On CISA KEVExploited in the wild
69
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 35Medium 17Low 6
Watch
Add Red Hat JBoss Enterprise Application Platform Expansion Pack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47691 | 10.0 | Jun 12 | Netty has Insufficient Bailiwick Validation for NS Records Affected: All versions, or not specified |
| CVE-2026-45674 | 10.0 | Jun 12 | Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records Affected: All versions, or not specified |
| CVE-2026-42581 | 9.8 | May 13 | Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization Affected: All versions, or not specified |
| CVE-2026-33701 | 9.8 | Mar 27 | OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution Affected: All versions, or not specified |
| CVE-2025-12543 | 9.6 | Jan 7 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf Affected: All versions, or not specified |
| CVE-2026-42584 | 9.1 | May 13 | Netty: HttpClientCodec response desynchronization Affected: All versions, or not specified |
| CVE-2026-42579 | 9.1 | May 13 | Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) Affected: All versions, or not specified |
| CVE-2026-28369 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via malformed http request headers Affected: All versions, or not specified |
| CVE-2026-28367 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator Affected: All versions, or not specified |
| CVE-2026-28368 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via inconsistent header parsing Affected: All versions, or not specified |
| CVE-2026-40477 | 9.0 | Apr 17 | Improper restriction of the scope of accessible objects in Thymeleaf expressions Affected: All versions, or not specified |
Showing 11