Red Hat, Inc. Red Hat JBoss Web Server

Name: Red Hat, Inc. Red Hat JBoss Web Server
Brand: Red Hat, Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical3high1medium1low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-31650US	high7.5	61.3% (99th)	Exploit	no fix	2025-04-28	7 versions
CVE-2024-24549US	—	23.1% (98th)	Exploit	no fix	2024-03-13	5 versions
CVE-2026-45447US	—	4.00% (90th)	Exploit	no fix	2026-06-09	≤ 6.2.5
CVE-2025-49125US	—OT elevated	3.44% (89th)	Exploit	no fix	2025-06-16	2 versions
CVE-2026-24733US	low3.7	0.55% (46th)	Exploit	no fix	2026-02-17	2 versions
CVE-2024-23672US	—	2.31% (83rd)	—	no fix	2024-03-13	2 versions
CVE-2026-18798US	—	1.70% (77th)	—	no fix	2026-08-25	2 versions
CVE-2024-38286US	high7.5	1.69% (77th)	—	no fix	2024-11-07	7 versions
CVE-2026-63076US	—	1.60% (76th)	—	no fix	2026-08-25	2 versions
CVE-2026-63073US	—	1.16% (67th)	—	no fix	2026-08-25	2 versions
CVE-2026-34180US	—	1.03% (63rd)	—	no fix	2026-06-09	≤ 6.2.5
CVE-2026-68763US	—	0.74% (55th)	—	no fix	2026-08-25	5 versions
CVE-2026-65927US	—	0.68% (52nd)	—	no fix	2026-08-25	5 versions
CVE-2026-54874US	—	0.62% (50th)	—	no fix	2026-08-25	2 versions
CVE-2026-65637US	—	0.61% (49th)	—	no fix	2026-08-25	≤ 7
CVE-2026-63074US	—	0.59% (48th)	—	no fix	2026-08-25	2 versions
CVE-2026-24734US	high7.5	0.57% (47th)	—	no fix	2026-02-17	5 versions
CVE-2026-63075US	—	0.57% (47th)	—	no fix	2026-08-25	2 versions
CVE-2026-65905US	—OT elevated	0.56% (47th)	—	no fix	2026-08-25	5 versions
CVE-2026-66299US	medium5.3	0.55% (46th)	—	no fix	2026-07-28	4 versions
CVE-2026-65182US	—OT elevated	0.54% (45th)	—	no fix	2026-08-25	5 versions
CVE-2026-59084US	—	0.51% (43rd)	—	no fix	2026-07-14	≤ 5
CVE-2026-43513US	—	0.50% (43rd)	—	no fix	2026-05-12	≤ 6
CVE-2026-68525US	—OT elevated	0.49% (42nd)	—	no fix	2026-08-25	5 versions
CVE-2026-68569US	—	0.46% (40th)	—	no fix	2026-08-25	5 versions
CVE-2026-73180US	—	0.44% (38th)	—	no fix	2026-08-25	2 versions
CVE-2026-66422US	—	0.43% (37th)	—	no fix	2026-08-25	5 versions
CVE-2026-65183US	—	0.40% (34th)	—	no fix	2026-08-25	5 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-459Incomplete Cleanup2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1024Comparison of Incompatible Types1 CVEs
CWE-1059Insufficient Technical Documentation1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan