Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
RHSA-2025:16667
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2025:16667
Import Source
https://security.access.redhat.com/data/osv/RHSA-2025:16667.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2025:16667
Upstream
CVE-2024-27316
CVE-2024-4109
CVE-2024-51127
CVE-2024-7885
CVE-2025-48734
Published
2025-09-25T10:18:43Z
Modified
2025-10-10T12:22:50Z
Severity
8.8 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.15 security update
Details
References
https://access.redhat.com/errata/RHSA-2025:16667
https://access.redhat.com/security/updates/classification/#important
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3
https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index
https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
https://bugzilla.redhat.com/show_bug.cgi?id=2268277
https://bugzilla.redhat.com/show_bug.cgi?id=2272325
https://bugzilla.redhat.com/show_bug.cgi?id=2305290
https://bugzilla.redhat.com/show_bug.cgi?id=2323697
https://bugzilla.redhat.com/show_bug.cgi?id=2368956
https://issues.redhat.com/browse/JBEAP-30314
https://issues.redhat.com/browse/JBEAP-30413
https://issues.redhat.com/browse/JBEAP-30483
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16667.json
https://access.redhat.com/security/cve/CVE-2024-4109
https://www.cve.org/CVERecord?id=CVE-2024-4109
https://nvd.nist.gov/vuln/detail/CVE-2024-4109
https://github.com/undertow-io/undertow/pull/1668#
https://access.redhat.com/security/cve/CVE-2024-7885
https://www.cve.org/CVERecord?id=CVE-2024-7885
https://nvd.nist.gov/vuln/detail/CVE-2024-7885
https://access.redhat.com/security/cve/CVE-2024-27316
https://www.cve.org/CVERecord?id=CVE-2024-27316
https://nvd.nist.gov/vuln/detail/CVE-2024-27316
https://httpd.apache.org/security/vulnerabilities_24.html
https://nowotarski.info/http2-continuation-flood/
https://www.kb.cert.org/vuls/id/421644
https://access.redhat.com/security/cve/CVE-2024-51127
https://www.cve.org/CVERecord?id=CVE-2024-51127
https://nvd.nist.gov/vuln/detail/CVE-2024-51127
http://hornetq.com
https://github.com/JAckLosingHeart/CWE-378/blob/main/CVE-2024-51127.md
https://access.redhat.com/security/cve/CVE-2025-48734
https://www.cve.org/CVERecord?id=CVE-2025-48734
https://nvd.nist.gov/vuln/detail/CVE-2025-48734
https://github.com/advisories/GHSA-wxr5-93ph-8wr9
https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc
https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
https://www.openwall.com/lists/oss-security/2025/05/28/6
Affected packages
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
eap7-apache-commons-beanutils
Package
Name
eap7-apache-commons-beanutils
Purl
pkg:rpm/redhat/eap7-apache-commons-beanutils
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.11.0-1.redhat_00001.1.el7eap
eap7-hornetq
Package
Name
eap7-hornetq
Purl
pkg:rpm/redhat/eap7-hornetq
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.el7eap
eap7-hornetq-commons
Package
Name
eap7-hornetq-commons
Purl
pkg:rpm/redhat/eap7-hornetq-commons
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.el7eap
eap7-hornetq-core-client
Package
Name
eap7-hornetq-core-client
Purl
pkg:rpm/redhat/eap7-hornetq-core-client
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.el7eap
eap7-hornetq-jms-client
Package
Name
eap7-hornetq-jms-client
Purl
pkg:rpm/redhat/eap7-hornetq-jms-client
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.4.11-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Package
Name
eap7-jboss-server-migration
Purl
pkg:rpm/redhat/eap7-jboss-server-migration
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-cli
Package
Name
eap7-jboss-server-migration-cli
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-core
Package
Name
eap7-jboss-server-migration-core
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-core
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap6.4
Package
Name
eap7-jboss-server-migration-eap6.4
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.3
Package
Name
eap7-jboss-server-migration-eap6.4-to-eap7.3
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap7.0
Package
Name
eap7-jboss-server-migration-eap7.0
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap7.1
Package
Name
eap7-jboss-server-migration-eap7.1
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap7.2
Package
Name
eap7-jboss-server-migration-eap7.2
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap7.2-to-eap7.3
Package
Name
eap7-jboss-server-migration-eap7.2-to-eap7.3
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2-to-eap7.3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-eap7.3-server
Package
Name
eap7-jboss-server-migration-eap7.3-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-eap7.3-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly10.0
Package
Name
eap7-jboss-server-migration-wildfly10.0
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly10.1
Package
Name
eap7-jboss-server-migration-wildfly10.1
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly11.0
Package
Name
eap7-jboss-server-migration-wildfly11.0
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly12.0
Package
Name
eap7-jboss-server-migration-wildfly12.0
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly13.0-server
Package
Name
eap7-jboss-server-migration-wildfly13.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly14.0-server
Package
Name
eap7-jboss-server-migration-wildfly14.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly15.0-server
Package
Name
eap7-jboss-server-migration-wildfly15.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly15.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly16.0-server
Package
Name
eap7-jboss-server-migration-wildfly16.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly16.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly17.0-server
Package
Name
eap7-jboss-server-migration-wildfly17.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly17.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly18.0-server
Package
Name
eap7-jboss-server-migration-wildfly18.0-server
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly18.0-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly8.2
Package
Name
eap7-jboss-server-migration-wildfly8.2
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-jboss-server-migration-wildfly9.0
Package
Name
eap7-jboss-server-migration-wildfly9.0
Purl
pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.7.2-19.Final_redhat_00020.1.el7eap
eap7-undertow
Package
Name
eap7-undertow
Purl
pkg:rpm/redhat/eap7-undertow
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.0.41-5.SP6_redhat_00001.1.el7eap
eap7-wildfly
Package
Name
eap7-wildfly
Purl
pkg:rpm/redhat/eap7-wildfly
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.3.15-5.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk11
Package
Name
eap7-wildfly-java-jdk11
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk11
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.3.15-5.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8
Package
Name
eap7-wildfly-java-jdk8
Purl
pkg:rpm/redhat/eap7-wildfly-java-jdk8
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.3.15-5.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs
Package
Name
eap7-wildfly-javadocs
Purl
pkg:rpm/redhat/eap7-wildfly-javadocs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.3.15-5.GA_redhat_00003.1.el7eap
eap7-wildfly-modules
Package
Name
eap7-wildfly-modules
Purl
pkg:rpm/redhat/eap7-wildfly-modules
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.3.15-5.GA_redhat_00003.1.el7eap
RHSA-2025:16667 - OSV