Red Hat JBoss Enterprise Application Platform 7.4

productDE

cpe:/a:redhat:jboss_enterprise_application_platform:7.4

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical5high2medium0low

updated 2026-10-27

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-37714US	high7.5	6.69% (94th)	—	no fix	2021-08-18	—
CVE-2021-30129US	medium6.5	3.05% (87th)	—	no fix	2021-07-12	—
CVE-2024-3653US	—	1.87% (79th)	—	no fix	2024-07-08	—
CVE-2021-3690US	high7.5	1.77% (78th)	—	no fix	2022-08-23	—
CVE-2023-1108US	high7.5	1.77% (78th)	—	no fix	2023-09-14	—
CVE-2024-8391US	high7.5	0.58% (47th)	—	no fix	2024-09-04	—
CVE-2023-0044US	medium6.1	0.55% (46th)	—	no fix	2023-02-23	—
CVE-2021-3717US	high7.8	0.32% (24th)	—	no fix	2022-05-24	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-248Uncaught Exception1 CVEs
CWE-552Files or Directories Accessible to External Parties1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-772Missing Release of Resource after Effective Lifetime1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.