JE
Product
Jboss Enterprise Application Platform Expansion Pack
23
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 6Low 2
Watch
Add Jboss Enterprise Application Platform Expansion Pack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4366 | 5.8 | Mar 18 | Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak Affected: All versions, or not specified |
| CVE-2025-5731 | 5.5 | Jun 26 | A flaw was found in Infinispan CLI Affected: All versions, or not specified |
| CVE-2026-16093 | 5.4 | Jul 17 | Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers Affected: All versions, or not specified |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: All versions, or not specified |
| CVE-2026-14209 | 4.3 | Jun 30 | Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions Affected: All versions, or not specified |
| CVE-2021-20250 | 4.3 | May 13 | A flaw was found in wildfly Affected: All versions, or not specified |
Showing 6