Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Fixed packages 46

Vulnerabilities 9

• Critical 9.8
  CVE-2025-48913

  Apache CXF: Untrusted JMS configuration can lead to RCE

  If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility. Users are re…

  Apache Software Foundation Apache CXF wildfly-openjdk-21 wildfly-openjdk-17 Wolfi Maven
  Aug 8, 2025
• Critical 9.6
  CVE-2025-12543

  Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

  A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malici…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  Jan 7, 2026
• High 8.7
  CVE-2024-7254

  Stack overflow in Protocol Buffers Java Lite

  Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsPar…

  Google protobuf-java google-protobuf [JRuby Gem] protobuf-kotlin Debian Ubuntu Wolfi Maven RubyGems
  Sep 19, 2024
• High 8.7
  CVE-2025-52999 Public exploit

  jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data

  jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses an input file and it has deeply nested data, Jackson could end up throwing a Stackov…

  FasterXML jackson-core druid tez Debian Ubuntu Wolfi Maven
  Jun 25, 2025
• High 8.3
  CVE-2026-0603 Public exploit

  Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

  A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. T…

  Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat OpenShift AI (RHOAI) Red Hat Data Grid 8 Maven
  Jan 23, 2026
• High 8.2
  CVE-2025-55163 Public exploit

  Netty MadeYouReset HTTP/2 DDoS Vulnerability

  Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

  netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Aug 13, 2025
• High 7.5
  CVE-2024-3884

  Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

  A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will caus…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Wolfi Maven
  Dec 3, 2025
• High 7.5
  CVE-2025-9784 Public exploit

  Undertow: undertow madeyoureset http/2 ddos vulnerability

  A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeate…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  Sep 2, 2025
• Medium 6.8
  CVE-2025-4949

  XXE vulnerability in Eclipse JGit

  In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are v…

  Eclipse JGit Eclipse JGit thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  May 21, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
• article
  https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275287
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2313454
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2367730
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2374804
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2387221
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2388252
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2392306
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2408784
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2427147
• article
  https://issues.redhat.com/browse/JBEAP-30074
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4915.json
• report
  https://access.redhat.com/security/cve/CVE-2024-3884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-3884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-3884
• report
  https://access.redhat.com/security/cve/CVE-2024-7254
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-7254
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-7254
• article
  https://github.com/protocolbuffers/protobuf/commit/cc8b3483a5584b3301e3d43d17eb59704857ffaa
• report
  https://access.redhat.com/security/cve/CVE-2025-4949
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-4949
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-4949
• article
  https://gitlab.eclipse.org/security/cve-assignement/-/issues/64
• article
  https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281
• article
  https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1
• report
  https://access.redhat.com/security/cve/CVE-2025-9784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-9784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-9784
• article
  https://github.com/undertow-io/undertow/pull/1778
• article
  https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final
• article
  https://issues.redhat.com/browse/UNDERTOW-2598
• article
  https://kb.cert.org/vuls/id/767506
• report
  https://access.redhat.com/security/cve/CVE-2025-12543
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-12543
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-12543
• report
  https://access.redhat.com/security/cve/CVE-2025-48913
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-48913