Skip to content
OpenAdvisories
Medium RHSA-2020:4245 4 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.3 security update on RHEL 8

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 93

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-cli 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-commons 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-core-client 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-dto 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-hornetq-protocol 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-hqclient-protocol 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-jdbc-store 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-jms-client 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-jms-server 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-journal 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-native 1:1.0.2-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-ra 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-selector 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-server 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-service-extensions 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-activemq-artemis-tools 0:2.9.0-5.redhat_00011.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-commons-codec 0:1.14.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-commons-lang 0:3.10.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-cxf 0:3.3.7-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-cxf-rt 0:3.3.7-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-cxf-services 0:3.3.7-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-apache-cxf-tools 0:3.3.7-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-artemis-native 1:1.0.2-3.redhat_1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-artemis-native-wildfly 1:1.0.2-3.redhat_1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-bouncycastle 0:1.65.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-bouncycastle-mail 0:1.65.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-bouncycastle-pkix 0:1.65.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-bouncycastle-prov 0:1.65.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-glassfish-jsf 0:2.3.9-11.SP12_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hal-console 0:3.2.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate 0:5.3.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-core 0:5.3.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-entitymanager 0:5.3.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-envers 0:5.3.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-hibernate-java8 0:5.3.18-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-httpcomponents-client 0:4.5.12-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-httpcomponents-core 0:4.4.13-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jberet 0:1.3.7-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jberet-core 0:1.3.7-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-invocation 0:1.5.3-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-logmanager 0:2.1.17-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-cli 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-core 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap6.4 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap6.4-to-eap7.3 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.0 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.1 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.2 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.2-to-eap7.3 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-eap7.3-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly10.0 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly10.1 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly11.0 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly12.0 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly13.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly14.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly15.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly16.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly17.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly18.0-server 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly8.2 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-server-migration-wildfly9.0 0:1.7.2-2.Final_redhat_00002.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jboss-xnio-base 0:3.7.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-jgroups 0:4.1.10-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-compensations 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-jbosstxbridge 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-jbossxts 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-jts-idlj 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-jts-integration 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-restat-api 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-restat-bridge 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-restat-integration 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-restat-util 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-narayana-txframework 0:5.9.9-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-picketbox 0:5.0.3-8.Final_redhat_00007.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-picketbox-infinispan 0:5.0.3-8.Final_redhat_00007.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-picketlink-bindings 0:2.5.5-25.SP12_redhat_00013.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-picketlink-wildfly8 0:2.5.5-25.SP12_redhat_00013.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-snakeyaml 0:1.26.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-undertow 0:2.0.31-1.SP1_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-velocity 0:2.2.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-velocity-engine-core 0:2.2.0-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly 0:7.3.3-4.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-elytron 0:1.10.8-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-elytron-tool 0:1.10.8-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-javadocs 0:7.3.3-4.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-modules 0:7.3.3-4.GA_redhat_00004.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-wildfly-transaction-client 0:1.1.13-1.Final_redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-ws-commons-XmlSchema 0:2.2.5-1.redhat_00001.1.el8eap
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7.3::el8 eap7-xerces-j2 0:2.12.0-2.SP03_redhat_00001.1.el8eap

Vulnerabilities 4

  • Medium 5.9
    CVE-2020-14340

    Uncontrolled Resource Consumption in XNIO

    A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.…

    jboss-xnio jboss-xnio org.jboss.xnio:xnio-nio Debian Ubuntu Maven
  • Medium 5.3
    CVE-2020-14338

    Improper Input Validation in Xerces

    A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validat…

    xerces:xercesImpl Maven
  • Medium 5.3
    CVE-2020-1954

    Apache CXF JMX Integration is vulnerable to a MITM attack

    Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in…

    Apache Apache CXF org.apache.cxf:cxf-rt-management Maven
  • Unscored —
    CVE-2020-14299

    A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delega…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1824301
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1848533
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1860054
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1860218
  • article
    https://issues.redhat.com/browse/JBEAP-19379
  • article
    https://issues.redhat.com/browse/JBEAP-19444
  • article
    https://issues.redhat.com/browse/JBEAP-19596
  • article
    https://issues.redhat.com/browse/JBEAP-19613
  • article
    https://issues.redhat.com/browse/JBEAP-19615
  • article
    https://issues.redhat.com/browse/JBEAP-19642
  • article
    https://issues.redhat.com/browse/JBEAP-19695
  • article
    https://issues.redhat.com/browse/JBEAP-19698
  • article
    https://issues.redhat.com/browse/JBEAP-19700
  • article
    https://issues.redhat.com/browse/JBEAP-19701
  • article
    https://issues.redhat.com/browse/JBEAP-19715
  • article
    https://issues.redhat.com/browse/JBEAP-19746
  • article
    https://issues.redhat.com/browse/JBEAP-19789
  • article
    https://issues.redhat.com/browse/JBEAP-19791
  • article
    https://issues.redhat.com/browse/JBEAP-19795
  • article
    https://issues.redhat.com/browse/JBEAP-19796
  • article
    https://issues.redhat.com/browse/JBEAP-19822
  • article
    https://issues.redhat.com/browse/JBEAP-19888
  • article
    https://issues.redhat.com/browse/JBEAP-19934
  • article
    https://issues.redhat.com/browse/JBEAP-19935
  • article
    https://issues.redhat.com/browse/JBEAP-19936
  • article
    https://issues.redhat.com/browse/JBEAP-19937
  • article
    https://issues.redhat.com/browse/JBEAP-19938
  • article
    https://issues.redhat.com/browse/JBEAP-19939
  • article
    https://issues.redhat.com/browse/JBEAP-19940
  • article
    https://issues.redhat.com/browse/JBEAP-19942
  • article
    https://issues.redhat.com/browse/JBEAP-19955
  • article
    https://issues.redhat.com/browse/JBEAP-19965
  • article
    https://issues.redhat.com/browse/JBEAP-20027
  • article
    https://issues.redhat.com/browse/JBEAP-20037
  • article
    https://issues.redhat.com/browse/JBEAP-20064
  • article
    https://issues.redhat.com/browse/JBEAP-20087