RHSA-2024:8824HighCVSS 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Published
November 4, 2024
Last Modified
May 27, 2026

🔗 CVE IDs covered (6)

CVE-2022-34169 →CVE-2023-52428 →CVE-2024-4029 →CVE-2024-8698 →CVE-2024-8883 →CVE-2024-41172 →

📋 Description

CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) CVE-2023-52428 — nimbus-jose-jwt: large JWE p2c header value causes Denial of Service CVE-2024-4029 — wildfly: No timeout for EAP management interface may lead to Denial of Service (DoS) CVE-2024-8698 — keycloak-saml-core: Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak CVE-2024-8883 — Keycloak: Vulnerable Redirect URI Validation Results in Open Redirec CVE-2024-41172 — apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients

🔗 References (28)