RHSA-2025:15816HighCVSS 8.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update

Published
September 15, 2025
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-48734 →

📋 Description

CVE-2025-48734 — commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

🎯 Affected products5

  • OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-0:2.516.2.1757087588-3.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-0:2.516.2.1757087588-3.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-2-plugins-0:4.14.1757087858-1.el8.noarch as a component of OpenShift Developer Tools and Services for OCP 4.14
  • jenkins-2-plugins-0:4.14.1757087858-1.el8.src as a component of OpenShift Developer Tools and Services for OCP 4.14

✅ Remediation

For more information on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (4)