Red Hat JBoss Enterprise Application Platform

productDE

cpe:/a:redhat:jboss_enterprise_application_platform:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

5critical7high0medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2025-8671US	—	3.62% (89th)	Exploit	no fix	2025-08-13	—
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	no fix	2025-08-13	—
CVE-2025-48989US	—	3.69% (90th)	—	no fix	2025-08-13	—
CVE-2025-5115US	high7.5	3.57% (89th)	—	no fix	2025-08-20	—
CVE-2026-42578US	high7.5	1.06% (65th)	—	no fix	2026-05-13	—
CVE-2025-2251US	—	1.06% (65th)	—	no fix	2025-04-07	—
CVE-2026-42579US	critical9.1	1.01% (63rd)	—	no fix	2026-05-13	—
CVE-2026-27727US	critical9.8	0.98% (62nd)	—	no fix	2026-02-25	—
CVE-2026-42584US	critical9.1	0.84% (58th)	—	no fix	2026-05-13	—
CVE-2024-10234US	high7.3	0.68% (52nd)	—	no fix	2024-10-22	—
CVE-2026-42581US	critical9.8	0.63% (50th)	—	no fix	2026-05-13	—
CVE-2026-44248US	high7.5	0.56% (47th)	—	no fix	2026-05-13	—
CVE-2026-42582US	—	0.44% (38th)	—	no fix	2026-05-13	—
CVE-2026-42577US	—	0.41% (35th)	—	no fix	2026-05-13	—
CVE-2026-42580US	—	0.38% (32nd)	—	no fix	2026-05-13	—
CVE-2026-41417US	—	0.32% (25th)	—	no fix	2026-05-06	—
CVE-2026-42585US	high7.5	0.27% (19th)	—	no fix	2026-05-13	—
CVE-2026-42586US	high7.1	0.22% (12th)	—	no fix	2026-05-13	—
CVE-2025-2901US	—	—	—	no fix	2025-03-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.