Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

CVE-2020-7238 — netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling CVE-2020-28052 — bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible CVE-2022-23221 — h2: Loading of custom classes from remote servers through JNDI CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) CVE-2022-41853 — hsqldb: Untrusted input may lead to RCE attack CVE-2022-46364 — CXF: SSRF Vulnerability CVE-2023-3171 — eap-7: heap exhaustion via deserialization CVE-2023-5685 — xnio: StackOverflowException when the chain of notifier states becomes problematically big CVE-2023-26464 — log4j1-socketappender: DoS via hashmap logging CVE-2023-39410 — apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2024-28752 — cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding CVE-2024-47561 — apache-avro: Schema parsing may trigger Remote Code Execution (RCE)