RHSA-2022:7273MediumCVSS 7.5

Red Hat Security Advisory: Red Hat JBoss Web Server 5.7.0 release and security update

Published
November 2, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2021-43980 →CVE-2022-23181 →CVE-2021-22696 →CVE-2021-30468 →

📋 Description

CVE-2021-22696 — cxf: OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-30468 — CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-43980 — Tomcat: Information disclosure CVE-2022-23181 — tomcat: local privilege escalation vulnerability

🎯 Affected products1

  • JWS 5.7.0

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

🔗 References (6)