Red Hat Inc. JBoss EAP

Name: Red Hat Inc. JBoss EAP
Brand: Red Hat Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical3high1medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	≤ 7
CVE-2017-12149US	critical9.8OT critical	90.7% (100th)	KEV	no fix	2017-10-04	≤ 5
CVE-2020-8840US	critical9.8	26.6% (98th)	Exploit	no fix	2020-02-10	≤ 7
CVE-2019-12086US	high7.5	21.9% (98th)	Exploit	no fix	2019-05-17	≤ 7.2
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	≤ 7
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	no fix	2020-03-02	≤ 7
CVE-2018-8088US	critical9.8	14.7% (97th)	—	no fix	2018-03-20	≤ 7.1
CVE-2019-14379US	critical9.8	8.11% (95th)	—	no fix	2019-07-29	≤ 7.2
CVE-2019-14892US	critical9.8	5.58% (93rd)	—	no fix	2020-03-02	≤ 7.2
CVE-2018-10237US	medium5.9	5.09% (92nd)	—	no fix	2018-04-26	≤ 7.1
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	no fix	2020-03-02	≤ 7
CVE-2023-26464US	high7.5	1.91% (80th)	—	no fix	2023-03-10	≤ 7.4.13
CVE-2017-7561US	high7.5	1.51% (74th)	—	no fix	2017-09-13	≤ 7

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data12 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-346Origin Validation Error1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.