Skip to content
OpenAdvisories
High RHSA-2020:2058 11 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 158

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-cli 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-commons 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-core-client 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-dto 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-hornetq-protocol 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-hqclient-protocol 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-jdbc-store 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-jms-client 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-jms-server 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-journal 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-ra 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-selector 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-server 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-service-extensions 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-activemq-artemis-tools 0:2.9.0-4.redhat_00010.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf 0:3.2.12-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-rt 0:3.2.12-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-services 0:3.2.12-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-apache-cxf-tools 0:3.2.12-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-bouncycastle 0:1.60.0-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-bouncycastle-mail 0:1.60.0-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-bouncycastle-pkix 0:1.60.0-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-bouncycastle-prov 0:1.60.0-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-codehaus-jackson 0:1.9.13-10.redhat_00007.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-codehaus-jackson-core-asl 0:1.9.13-10.redhat_00007.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-codehaus-jackson-jaxrs 0:1.9.13-10.redhat_00007.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-codehaus-jackson-mapper-asl 0:1.9.13-10.redhat_00007.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-codehaus-jackson-xc 0:1.9.13-10.redhat_00007.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-cryptacular 0:1.2.4-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-glassfish-el 0:3.0.1-5.b08_redhat_00004.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-glassfish-el-impl 0:3.0.1-5.b08_redhat_00004.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-glassfish-javamail 0:1.6.2-2.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-glassfish-jsf 0:2.3.5-10.SP3_redhat_00008.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hal-console 0:3.0.21-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-commons-annotations 0:5.0.5-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search-backend-jgroups 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search-backend-jms 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search-engine 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search-orm 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-hibernate-search-serialization-avro 0:5.10.7-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-httpcomponents-client 0:4.5.4-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-httpcomponents-core 0:4.4.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jackson-databind 0:2.9.10.2-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jasypt 0:1.9.3-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-javaee-security-soteria 0:1.0.0-3.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-javaee-security-soteria-enterprise 0:1.0.0-3.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jaxbintros 0:1.0.3-1.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-batch-api_1.0_spec 0:1.0.2-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-classfilewriter 0:1.2.4-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-common-beans 0:2.0.1-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-ejb-api_3.2_spec 0:1.0.2-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-ejb-client 0:4.0.31-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-invocation 0:1.5.2-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-jsf-api_2.3_spec 0:2.3.5-5.SP2_redhat_00003.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-modules 0:1.8.9-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-openjdk-orb 0:8.1.4-3.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-remoting 0:5.0.18-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-remoting-jmx 0:3.0.4-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-security-negotiation 0:3.0.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-cli 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-core 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap6.4 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap6.4-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.0 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.0-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.1 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.1-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.0 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.0-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.1 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly10.1-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly11.0 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly11.0-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly12.0 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly12.0-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly13.0-server 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly14.0-server 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly8.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly8.2-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly9.0 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-server-migration-wildfly9.0-to-eap7.2 0:1.3.1-10.Final_redhat_00011.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-threads 0:2.3.3-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jboss-websocket-api_1.1_spec 0:1.1.4-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jbossws-common 0:3.2.3-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jgroups 0:4.0.20-2.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jgroups-azure 0:1.2.1-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-jgroups-kubernetes 0:1.0.13-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-mod_cluster 0:1.4.1-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-compensations 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-jbosstxbridge 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-jbossxts 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-jts-idlj 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-jts-integration 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-restat-api 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-restat-bridge 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-restat-integration 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-restat-util 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-narayana-txframework 0:5.9.8-1.Final_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-core 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-profile-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-saml-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-saml-impl 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-security-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-security-impl 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-soap-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xacml-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xacml-impl 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xacml-saml-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xacml-saml-impl 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xmlsec-api 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-opensaml-xmlsec-impl 0:3.3.1-1.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketbox 0:5.0.3-7.Final_redhat_00006.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-picketbox-infinispan 0:5.0.3-7.Final_redhat_00006.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-atom-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-cdi 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-client 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-client-microprofile 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-crypto 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jackson-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jackson2-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jaxb-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jaxrs 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jettison-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jose-jwt 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-jsapi 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-json-binding-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-json-p-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-multipart-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-rxjava2 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-spring 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-validator-provider-11 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-resteasy-yaml-provider 0:3.6.1-9.SP8_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-slf4j-jboss-logmanager 0:1.0.4-1.GA_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-smallrye-config 0:1.3.6-1.SP01_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-smallrye-health 0:1.0.2-2.redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-undertow 0:2.0.30-2.SP2_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-weld-cdi-2.0-api 0:2.0.0-4.SP1_redhat_00004.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly 0:7.2.8-3.GA_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-elytron 0:1.6.6-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-javadocs 0:7.2.8-3.GA_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-modules 0:7.2.8-3.GA_redhat_00002.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-naming-client 0:1.0.12-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wildfly-transaction-client 0:1.1.10-1.Final_redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-ws-commons-XmlSchema 0:2.2.4-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-bindings 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-policy 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-ws-security-common 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-ws-security-dom 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-ws-security-policy-stax 0:2.2.5-1.redhat_00001.1.el6eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.2::el6 eap7-wss4j-ws-security-stax 0:2.2.5-1.redhat_00001.1.el6eap

Vulnerabilities 11

  • High 8.6
    CVE-2020-1745

    Improper Authorization in Undertoe

    A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before and was fixed in 2.0.30.Final. A remote, unauthenticated attacker could exploit this vulnerability …

    undertow-io undertow undertow undertow Debian Ubuntu Maven
  • High 8.1
    CVE-2020-1757

    Improper Input Validation in Undertow

    A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path afte…

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • High 7.5
    CVE-2019-12423

    Private key leak in Apache CXF

    Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local …

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • High 7.5
    CVE-2020-10705

    Allocation of Resources Without Limits or Throttling in Undertow

    A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • High 7.5
    CVE-2020-7226

    Denial of Service in Cryptacular

    CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input wi…

    org.cryptacular:cryptacular Maven
  • Medium 6.5
    CVE-2020-10719

    HTTP Request Smuggling in Undertow

    A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request smuggling.

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • Medium 6.1
    CVE-2019-17573 Public exploit

    Reflected Cross-Site Scripting in Apache CXF

    By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web p…

    Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  • Medium 5.9
    CVE-2019-10172 Public exploit EPSS 17%

    Improper Restriction of XML External Entity Reference in jackson-mapper-asl

    A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

    Red Hat jackson-mapper-asl tez spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  • Medium 5.4
    CVE-2020-1719

    Privilege Context Switching Error in wildlfy

    A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wildfly 20.0.0.Final ar…

    org.wildfly.bom:wildfly Maven
  • Medium 4.2
    CVE-2020-1732

    A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security ident…

    Red Hat Soteria
  • Medium 4.0
    CVE-2020-1729

    Permissions bypass in SmallRye

    A flaw was found in SmallRye's API through version 1.6.1. The API can allow other code running within the application server to potentially obtain the ClassLoader, bypassing any permissions checks that should have been applied. The largest threat from this vu…

    io.smallrye.config:smallrye-config Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1715075
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1752770
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1796617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797006
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1797011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801380
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1801726
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802444
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1803241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1807305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1828459
  • article
    https://issues.redhat.com/browse/JBEAP-18071
  • article
    https://issues.redhat.com/browse/JBEAP-18267
  • article
    https://issues.redhat.com/browse/JBEAP-18278
  • article
    https://issues.redhat.com/browse/JBEAP-18423
  • article
    https://issues.redhat.com/browse/JBEAP-18438
  • article
    https://issues.redhat.com/browse/JBEAP-18503
  • article
    https://issues.redhat.com/browse/JBEAP-18506
  • article
    https://issues.redhat.com/browse/JBEAP-18536
  • article
    https://issues.redhat.com/browse/JBEAP-18595
  • article
    https://issues.redhat.com/browse/JBEAP-18616
  • article
    https://issues.redhat.com/browse/JBEAP-18628
  • article
    https://issues.redhat.com/browse/JBEAP-18631
  • article
    https://issues.redhat.com/browse/JBEAP-18639
  • article
    https://issues.redhat.com/browse/JBEAP-18646
  • article
    https://issues.redhat.com/browse/JBEAP-18652
  • article
    https://issues.redhat.com/browse/JBEAP-18664
  • article
    https://issues.redhat.com/browse/JBEAP-18724
  • article
    https://issues.redhat.com/browse/JBEAP-18729
  • article
    https://issues.redhat.com/browse/JBEAP-18787
  • article
    https://issues.redhat.com/browse/JBEAP-18789
  • article
    https://issues.redhat.com/browse/JBEAP-18817
  • article
    https://issues.redhat.com/browse/JBEAP-18827
  • article
    https://issues.redhat.com/browse/JBEAP-18835
  • article
    https://issues.redhat.com/browse/JBEAP-18885
  • article
    https://issues.redhat.com/browse/JBEAP-18931