Vulnerability Database
Blog
FAQ
Docs
RHSA-2025:1637
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2025:1637
Import Source
https://security.access.redhat.com/data/osv/RHSA-2025:1637.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2025:1637
Published
2025-02-19T10:03:29Z
Modified
2025-04-04T01:10:04.754075Z
Upstream
CVE-2024-51127
Severity
7.1 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Calculator
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update
Details
References
https://access.redhat.com/errata/RHSA-2025:1637
https://access.redhat.com/security/updates/classification/#important
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
https://bugzilla.redhat.com/show_bug.cgi?id=2323697
https://issues.redhat.com/browse/JBEAP-27610
https://issues.redhat.com/browse/JBEAP-28234
https://issues.redhat.com/browse/JBEAP-28359
https://issues.redhat.com/browse/JBEAP-28587
https://issues.redhat.com/browse/JBEAP-28691
https://issues.redhat.com/browse/JBEAP-28729
https://issues.redhat.com/browse/JBEAP-28730
https://issues.redhat.com/browse/JBEAP-29200
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1637.json
https://access.redhat.com/security/cve/CVE-2024-51127
https://www.cve.org/CVERecord?id=CVE-2024-51127
https://nvd.nist.gov/vuln/detail/CVE-2024-51127
http://hornetq.com
https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md
Affected packages
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hal-console
Package
Name
eap7-hal-console
Purl
pkg:rpm/redhat/eap7-hal-console
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.3.25-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hibernate
Package
Name
eap7-hibernate
Purl
pkg:rpm/redhat/eap7-hibernate
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hibernate-core
Package
Name
eap7-hibernate-core
Purl
pkg:rpm/redhat/eap7-hibernate-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hibernate-entitymanager
Package
Name
eap7-hibernate-entitymanager
Purl
pkg:rpm/redhat/eap7-hibernate-entitymanager
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hibernate-envers
Package
Name
eap7-hibernate-envers
Purl
pkg:rpm/redhat/eap7-hibernate-envers
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-hibernate-java8
Package
Name
eap7-hibernate-java8
Purl
pkg:rpm/redhat/eap7-hibernate-java8
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.3.37-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jbossws-common
Package
Name
eap7-jbossws-common
Purl
pkg:rpm/redhat/eap7-jbossws-common
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.0-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-jbossws-cxf
Package
Name
eap7-jbossws-cxf
Purl
pkg:rpm/redhat/eap7-jbossws-cxf
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:5.4.14-1.Final_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml
Package
Name
eap7-opensaml
Purl
pkg:rpm/redhat/eap7-opensaml
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-core
Package
Name
eap7-opensaml-core
Purl
pkg:rpm/redhat/eap7-opensaml-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-profile-api
Package
Name
eap7-opensaml-profile-api
Purl
pkg:rpm/redhat/eap7-opensaml-profile-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-saml-api
Package
Name
eap7-opensaml-saml-api
Purl
pkg:rpm/redhat/eap7-opensaml-saml-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-saml-impl
Package
Name
eap7-opensaml-saml-impl
Purl
pkg:rpm/redhat/eap7-opensaml-saml-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-security-api
Package
Name
eap7-opensaml-security-api
Purl
pkg:rpm/redhat/eap7-opensaml-security-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-security-impl
Package
Name
eap7-opensaml-security-impl
Purl
pkg:rpm/redhat/eap7-opensaml-security-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-soap-api
Package
Name
eap7-opensaml-soap-api
Purl
pkg:rpm/redhat/eap7-opensaml-soap-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xacml-api
Package
Name
eap7-opensaml-xacml-api
Purl
pkg:rpm/redhat/eap7-opensaml-xacml-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xacml-impl
Package
Name
eap7-opensaml-xacml-impl
Purl
pkg:rpm/redhat/eap7-opensaml-xacml-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xacml-saml-api
Package
Name
eap7-opensaml-xacml-saml-api
Purl
pkg:rpm/redhat/eap7-opensaml-xacml-saml-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xacml-saml-impl
Package
Name
eap7-opensaml-xacml-saml-impl
Purl
pkg:rpm/redhat/eap7-opensaml-xacml-saml-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xmlsec-api
Package
Name
eap7-opensaml-xmlsec-api
Purl
pkg:rpm/redhat/eap7-opensaml-xmlsec-api
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-opensaml-xmlsec-impl
Package
Name
eap7-opensaml-xmlsec-impl
Purl
pkg:rpm/redhat/eap7-opensaml-xmlsec-impl
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.4.6-1.redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly
Package
Name
eap7-wildfly
Purl
pkg:rpm/redhat/eap7-wildfly
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk11
Package
Name
eap7-wildfly-java-jdk11
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk11
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk17
Package
Name
eap7-wildfly-java-jdk17
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk17
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-java-jdk8
Package
Name
eap7-wildfly-java-jdk8
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk8
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-javadocs
Package
Name
eap7-wildfly-javadocs
Purl
pkg:rpm/redhat/eap7-wildfly-javadocs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-wildfly-modules
Package
Name
eap7-wildfly-modules
Purl
pkg:rpm/redhat/eap7-wildfly-modules
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.4.21-2.GA_redhat_00001.1.el8eap
Red Hat:jboss_enterprise_application_platform:7.4::el8
/
eap7-xml-security
Package
Name
eap7-xml-security
Purl
pkg:rpm/redhat/eap7-xml-security
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.3.5-1.redhat_00001.1.el8eap
RHSA-2025:1637 - OSV