RHSA-2025:10452HighCVSS 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

Published
July 7, 2025
Last Modified
June 23, 2026

🔗 CVE IDs covered (5)

CVE-2025-2901 · pendingCVE-2025-23184 →CVE-2025-27611 →CVE-2025-48734 →CVE-2025-2251 →

📋 Description

CVE-2025-2251 — org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution CVE-2025-2901 — org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console CVE-2025-23184 — org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files CVE-2025-27611 — base-x: base-x homograph attack allows Unicode lookalike characters to bypass validation. CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

🔗 References (27)