What is RHSA-2021:3471?

RHSA-2021:3471 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.9 security update

Which CVE IDs does RHSA-2021:3471 cover?

RHSA-2021:3471 covers the following CVE IDs: CVE-2021-3597, CVE-2021-3644, CVE-2021-3690, CVE-2021-28170, CVE-2021-29425. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:3471?

RHSA-2021:3471 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2021:3471?

RHSA-2021:3471 affects 1 product, including: EAP 7.3.9 release.

RHSA-2021:3471HighCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.9 security update

Vendor

Red Hat Product Security

Published

September 8, 2021

Last Modified

August 4, 2026

🔗 CVE IDs covered (5)

CVE-2021-3597 →CVE-2021-3644 →CVE-2021-3690 →CVE-2021-28170 →CVE-2021-29425 →

📋 Description

CVE-2021-3597 — undertow: HTTP2SourceChannel fails to write final frame under some circumstances may lead to DoS CVE-2021-3644 — wildfly-core: Invalid Sensitivity Classification of Vault Expression CVE-2021-3690 — undertow: buffer leak on incoming websocket PONG message may lead to DoS CVE-2021-28170 — jakarta-el: ELParserTokenManager enables invalid EL expressions to be evaluate CVE-2021-29425 — apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6

🎯 Affected products1

EAP 7.3.9 release

✅ Remediation

Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications. The References section of this erratum contains a download link (you must log in to download the update).

🔗 CVE IDs covered (5)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (25)