Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Name: Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Brand: Red Hat

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

4critical1high0medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-9784US	—	2.33% (83rd)	Exploit	0:5.0.12-1.Final_redhat_00001.1.el9eap	2025-09-02	12 versions
CVE-2025-12543US	critical9.6	1.33% (71st)	Exploit	0:2.3.20-2.SP4_redhat_00001.1.el9eap	2026-01-07	12 versions
CVE-2024-3884US	—	1.36% (72nd)	—	0:5.0.12-1.Final_redhat_00001.1.el9eap	2025-12-03	12 versions
CVE-2025-23368US	high8.1	0.89% (59th)	—	0:8.1.6-5.GA_redhat_00007.1.el9eap	2025-03-04	< 0:8.1.6-5.GA_redhat_00007.1.el9eap
CVE-2026-28368US	critical9.1	0.73% (54th)	—	0:8.1.6-7.GA_redhat_00010.1.el9eap	2026-03-27	4 versions
CVE-2026-28367US	critical9.1	0.72% (54th)	—	0:2.3.24-3.SP2_redhat_00001.1.el9eap	2026-03-27	4 versions
CVE-2026-28369US	critical9.1	0.69% (53rd)	—	0:801.6.1-1.GA_redhat_00001.1.el9eap	2026-03-27	4 versions
CVE-2025-12799US	—	0.41% (35th)	—	0:801.7.0-1.GA_redhat_00001.1.el9eap	2026-07-07	11 versions

The flaw types (CWEs) most of these CVEs share.

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.