VendorsRed Hatjboss_enterprise_application_platform8.0.0
Vulnerabilities

Red Hat JBoss Enterprise Application Platform 4.2.0 CP09 8.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2026-28367
Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator
Published 2026-03-27 · Modified
9.1EPSS 0.007
CVE-2026-28368
Undertow: undertow: request smuggling via inconsistent header parsing
Published 2026-03-27 · Modified
9.1EPSS 0.007
CVE-2026-28369
Undertow: undertow: request smuggling via malformed http request headers
Published 2026-03-27 · Modified
9.1EPSS 0.007
CVE-2025-23368
Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli
Published 2025-03-04 · Modified
8.1EPSS 0.009
CVE-2024-7885
Undertow: improper state management in proxy protocol parsing causes information leakage
Published 2024-08-21 · Modified
7.5EPSS 0.026
CVE-2025-9784
Undertow: undertow madeyoureset http/2 ddos vulnerability
Published 2025-09-02 · Modified
7.5EPSS 0.023
CVE-2026-3121
Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission
Published 2026-03-26 · Modified
7.2EPSS 0.005
CVE-2026-4366
Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak
Published 2026-03-18 · Modified
5.8EPSS 0.002
CVE-2025-5731
Infinispan: credential leakage in infinispan cli
Published 2025-06-26 · Modified
5.5EPSS 0.002
CVE-2026-4874
Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation
Published 2026-03-26 · Modified
3.1EPSS 0.003