Red Hat Jboss Enterprise Application Platform 81 For Rhel 10

Vulnerabilities related to Red Hat Jboss Enterprise Application Platform 81 For Rhel 10 13

• High 8.8 WildFlyの権限制御の回避で管理者権限を奪われる脆弱性 WildFly Coreのデプロイメント操作を扱う一部のハンドラーで、機密性の分類が不十分なため、制限付きの「Maintainer」ロールの管理者が機密の設定ファイルを読めてしまいます。認証情報が流出し、サーバーの完全な管理者権限(SuperUser)を奪われるおそれがあり、CVSSは8.8です。修正版の情報は公表されていないため、最新の情報を確認してください。 CVE-2026-12977 Nov 10, 04:07
• Medium 5.9 Vulnerability in DERDecoder class within wildfly-elytron-asn1 CVE-2026-10832 Sep 19, 00:17
• High 8.8 Unsafe Deserialization in EAP Vulnerability in EAP (CVE-2026-86404). Successful exploitation can lead to full system takeover. CVE-2026-86404 Sep 7, 21:17
• High 7.5 Vulnerability in Undertow CVE-2026-5680 Aug 28, 02:18
• Medium 5.3 Vulnerability in Undertow HTTP server CVE-2026-14180 Aug 12, 01:17
• High 7.5 Vulnerability in Wildfly CVE-2026-15567 Aug 11, 18:32
• High 8.1 when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase... Vulnerability reported (CVE-2026-15560). Successful exploitation can lead to full system takeover. CVE-2026-15560 Aug 11, 18:32
• High 7.4 Vulnerability in EAP's IIOP CVE-2026-15563 Aug 11, 18:32
• High 7.5 Vulnerability in EAP's undertow http/1.1 chunked-transfer decoder CVE-2026-15561 Aug 11, 18:32
• High 7.5 Vulnerability in Undertow CVE-2026-15565 Aug 11, 18:32
• High 7.5 Vulnerability in EAP's jboss-remoting CVE-2026-15562 Aug 11, 18:32
• High 8.8 Unsafe Deserialization in JBoss marshalling Vulnerability in JBoss marshalling (CVE-2026-15555). Successful exploitation can lead to full system takeover. CVE-2026-15555 Aug 11, 18:32
• High 7.4 the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any... Vulnerability reported (CVE-2026-15554). Confidential information can be exposed externally. CVE-2026-15554 Aug 11, 18:32