Jboss Enterprise Application Platform Expansion Pack vulnerabilities

Product

Jboss Enterprise Application Platform Expansion Pack

by Redhat · last CVE Aug 6, 2026

CVEs

On KEV

9.6

Max CVSS

New 30D

Severity mix

Critical 4High 11Medium 6Low 2

Severity

Exploitation

Watch

Add Jboss Enterprise Application Platform Expansion Pack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-4874	3.1	0%	Mar 26	Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation Affected: All versions, or not specified
CVE-2026-15945	2.7	0%	Jul 16	Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 Affected: All versions, or not specified