{"api_version":"v1","generated_at":"2026-10-09T08:05:00+00:00","product":{"cve_count":4,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-red-hat-red-hat-jboss-enterprise-application-platform-be7e6232ef36","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/red-hat-jboss-eap","name":"Red Hat JBoss Enterprise Application Platform","next_cursor":null,"observations":[{"affected":"< 27.0.1.Final, 28.0.0.Beta1 < 28.0.0.Beta2","affected_versions_present":true,"cve_id":"CVE-2025-23367","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23367","fixed":"Red Hat JBoss Enterprise Application Platform: 15.0.45.Final-redhat-00001 < *; Red Hat JBoss Enterprise Application Platform 7.4.22: 15.0.42.Final-redhat-00001 < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8: 0:4.1.119-1.Final_redhat_00004.1.el8eap < *, 0:7.4.21-3.GA_29548_redhat_00001.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9: 0:4.1.119-1.Final_redhat_00004.1.el9eap < *, 0:7.4.21-3.GA_29548_redhat_00001.1.el9eap < *; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7: 0:4.1.119-1.Final_redhat_00004.1.el7eap < *, 0:7.4.21-3.GA_29548_redhat_00001.1.el7eap < *; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8: 0:2.16.1-1.redhat_00001.1.el8eap < *, 0:1.80.0-1.redhat_00001.1.el8eap < *, 0:800.7.0-2.GA_redhat_00002.1.el8eap < *, 0:6.2.35-1.Final_redhat_00001.1.el8eap < *, 0:3.0.13-1.Final_redhat_00001.1.el8eap < *, 0:3.0.1-1.redhat_00001.1.el8eap < *, 0:4.0.11-1.redhat_00001.1.el8eap < *, 0:1.0.4-3.redhat_00004.1.el8eap < *, 0:3.1.10-1.redhat_00001.1.el8eap < *, 0:5.1.5-1.Final_redhat_00001.1.el8eap < *, 0:8.0.7-3.GA_redhat_00004.1.el8eap < *, 0:2.2.9-1.Final_redhat_00001.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9: 0:2.16.1-1.redhat_00001.1.el9eap < *, 0:1.80.0-1.redhat_00001.1.el9eap < *, 0:800.7.0-2.GA_redhat_00002.1.el9eap < *, 0:6.2.35-1.Final_redhat_00001.1.el9eap < *, 0:3.0.13-1.Final_redhat_00001.1.el9eap < *, 0:3.0.1-1.redhat_00001.1.el9eap < *, 0:4.0.11-1.redhat_00001.1.el9eap < *, 0:1.0.4-3.redhat_00004.1.el9eap < *, 0:3.1.10-1.redhat_00001.1.el9eap < *, 0:5.1.5-1.Final_redhat_00001.1.el9eap < *, 0:8.0.7-3.GA_redhat_00004.1.el9eap < *, 0:2.2.9-1.Final_redhat_00001.1.el9eap < *","last_modified":"2026-09-17T23:50:34.811Z","patch_url":"https://access.redhat.com/errata/RHSA-2025:3465","primary_source":"","published":"2025-01-30T14:30:04.227Z"},{"affected":"< 24.0.1.Final","affected_versions_present":true,"cve_id":"CVE-2024-4029","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-4029","fixed":"25.0.0.Final < *; Red Hat JBoss Enterprise Application Platform: 15.0.39.Final-redhat-00001 < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8: 0:3.3.24-1.Final_redhat_00001.1.el8eap < *, 0:6.0.23-2.SP1_redhat_00001.1.el8eap < *, 0:1.1.3-1.redhat_00001.1.el8eap < *, 0:1.5.18-1.Final_redhat_00001.1.el8eap < *, 0:4.0.55-1.Final_redhat_00001.1.el8eap < *, 0:1.10.0-39.Final_redhat_00039.1.el8eap < *, 0:5.4.12-1.Final_redhat_00001.1.el8eap < *, 0:1.15.4-1.redhat_00003.1.el8eap < *, 0:2.0.15-1.Final_redhat_00001.1.el8eap < *, 0:7.4.19-1.GA_redhat_00002.1.el8eap < *, 0:2.7.1-37.redhat_00015.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9: 0:3.3.24-1.Final_redhat_00001.1.el9eap < *, 0:6.0.23-2.SP1_redhat_00001.1.el9eap < *, 0:1.1.3-1.redhat_00001.1.el9eap < *, 0:1.5.18-1.Final_redhat_00001.1.el9eap < *, 0:4.0.55-1.Final_redhat_00001.1.el9eap < *, 0:1.10.0-39.Final_redhat_00039.1.el9eap < *, 0:5.4.12-1.Final_redhat_00001.1.el9eap < *, 0:1.15.4-1.redhat_00003.1.el9eap < *, 0:2.0.15-1.Final_redhat_00001.1.el9eap < *, 0:7.4.19-1.GA_redhat_00002.1.el9eap < *, 0:2.7.1-37.redhat_00015.1.el9eap < *; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7: 0:3.3.24-1.Final_redhat_00001.1.el7eap < *, 0:6.0.23-2.SP1_redhat_00001.1.el7eap < *, 0:1.1.3-1.redhat_00001.1.el7eap < *, 0:1.5.18-1.Final_redhat_00001.1.el7eap < *, 0:4.0.55-1.Final_redhat_00001.1.el7eap < *, 0:1.10.0-39.Final_redhat_00039.1.el7eap < *, 0:5.4.12-1.Final_redhat_00001.1.el7eap < *, 0:1.15.4-1.redhat_00003.1.el7eap < *, 0:2.0.15-1.Final_redhat_00001.1.el7eap < *, 0:7.4.19-1.GA_redhat_00002.1.el7eap < *, 0:2.7.1-37.redhat_00015.1.el7eap < *; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8: 0:2.33.0-1.redhat_00015.1.el8eap < *, 1:2.0.0-2.redhat_00005.1.el8eap < *, 0:1.8.0-2.redhat_00001.1.el8eap < *, 0:2.2.0-2.redhat_00001.1.el8eap < *, 0:1.16.1-2.redhat_00007.1.el8eap < *, 0:3.2.2-28.redhat_2.1.el8eap < *, 0:2.15.1-1.redhat_00001.1.el8eap < *, 0:3.14.0-2.redhat_00006.1.el8eap < *, 0:4.0.5-1.redhat_00001.1.el8eap < *, 0:2.0.1-1.redhat_00002.1.el8eap < *, 0:0.1.0-2.redhat_00010.1.el8eap < *, 0:1.12.284-2.redhat_00002.1.el8eap < *, 0:1.2.5-2.redhat_00001.1.el8eap < *, 0:800.4.0-1.GA_redhat_00001.1.el8eap < *, 0:2.1.0-4.redhat_00001.1.el8eap < *, 0:6.2.31-1.Final_redhat_00002.1.el8eap < *, 0:8.0.1-3.Final_redhat_00001.1.el8eap < *, 0:0.8.1-2.redhat_00001.1.el8eap < *, 0:1.1.3-1.redhat_00001.1.el8eap < *, 0:3.0.1-1.redhat_00001.1.el8eap < *, 0:3.5.3-1.Final_redhat_00001.1.el8eap < *, 0:4.0.2-1.redhat_00001.1.el8eap < *, 0:5.3.10-1.Final_redhat_00001.1.el8eap < *, 0:2.22.1-1.redhat_00002.1.el8eap < *, 0:6.0.3-1.Final_redhat_00001.1.el8eap < *, 0:9.37.3-1.redhat_00001.1.el8eap < *, 0:9.6.0-1.redhat_00002.1.el8eap < *, 0:2.3.0-1.redhat_00001.1.el8eap < *, 0:2.0.1-3.Final_redhat_00001.1.el8eap < *, 0:3.0.1-2.Final_redhat_00001.1.el8eap < *, 0:3.0.4-1.redhat_00001.1.el8eap < *, 0:8.0.0-6.redhat_00001.1.el8eap < *, 0:2.0.16-1.redhat_00001.1.el8eap < *, 0:2.2.0-1.redhat_00001.1.el8eap < *, 0:8.0.4-2.GA_redhat_00005.1.el8eap < *; 1 additional product group retained in the authoritative source","last_modified":"2026-09-24T03:04:27.644Z","patch_url":"https://access.redhat.com/errata/RHSA-2024:8075","primary_source":"","published":"2024-05-02T14:55:27.135Z"},{"affected":"< 32.0.0.Final","affected_versions_present":true,"cve_id":"CVE-2024-1233","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-1233","fixed":"Red Hat JBoss Enterprise Application Platform: 1.15.23.Final-redhat-00001 < *; Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7: 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 < *, 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 < *, 0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7 < *, 0:4.0.12-1.Final_redhat_00002.1.ep7.el7 < *, 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 < *, 0:1.4.18-16.SP14_redhat_00001.1.ep7.el7 < *, 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 < *, 0:1.1.14-1.Final_redhat_00001.1.ep7.el7 < *, 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 < *, 0:1.0.13-1.Final_redhat_00001.1.ep7.el7 < *, 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 < *, 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 < *; Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7: 0:2.10.4-3.redhat_00006.1.el7eap < *, 0:2.10.4-5.redhat_00006.1.el7eap < *, 0:2.10.4-2.redhat_00006.1.el7eap < *, 0:1.7.2-16.Final_redhat_00017.1.el7eap < *, 0:4.1.63-5.Final_redhat_00003.1.el7eap < *, 0:2.0.41-4.SP5_redhat_00001.1.el7eap < *, 0:7.3.14-3.GA_redhat_00002.1.el7eap < *, 0:1.10.17-1.Final_redhat_00001.1.el7eap < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8: 0:3.5.8-1.redhat_00001.1.el8eap < *, 0:3.3.22-1.Final_redhat_00001.1.el8eap < *, 0:11.0.19-2.Final_redhat_00001.1.el8eap < *, 0:4.0.54-3.Final_redhat_00001.1.el8eap < *, 0:3.0.0-8.SP08_redhat_00001.1.el8eap < *, 0:13.5.0-1.Final_redhat_00001.1.el8eap < *, 0:1.12.3-3.Final_redhat_00001.1.el8eap < *, 0:1.10.0-36.Final_redhat_00035.1.el8eap < *, 0:2.2.32-1.SP1_redhat_00001.1.el8eap < *, 0:7.4.17-2.GA_redhat_00002.1.el8eap < *, 0:1.2.4-1.Final_redhat_00001.1.el8eap < *, 0:1.15.23-2.Final_redhat_00001.1.el8eap < *, 0:1.1.17-1.Final_redhat_00002.1.el8eap < *, 0:1.1.19-1.Final_redhat_00001.1.el8eap < *, 0:2.4.3-1.redhat_00001.1.el8eap < *, 0:2.3.4-1.redhat_00002.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9: 0:3.5.8-1.redhat_00001.1.el9eap < *, 0:3.3.22-1.Final_redhat_00001.1.el9eap < *, 0:11.0.19-2.Final_redhat_00001.1.el9eap < *, 0:4.0.54-3.Final_redhat_00001.1.el9eap < *, 0:3.0.0-8.SP08_redhat_00001.1.el9eap < *, 0:13.5.0-1.Final_redhat_00001.1.el9eap < *, 0:1.12.3-3.Final_redhat_00001.1.el9eap < *, 0:1.10.0-36.Final_redhat_00035.1.el9eap < *, 0:2.2.32-1.SP1_redhat_00001.1.el9eap < *, 0:7.4.17-2.GA_redhat_00002.1.el9eap < *, 0:1.2.4-1.Final_redhat_00001.1.el9eap < *, 0:1.15.23-2.Final_redhat_00001.1.el9eap < *, 0:1.1.17-1.Final_redhat_00002.1.el9eap < *, 0:1.1.19-1.Final_redhat_00001.1.el9eap < *, 0:2.4.3-1.redhat_00001.1.el9eap < *, 0:2.3.4-1.redhat_00002.1.el9eap < *; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7: 0:1.15.23-2.Final_redhat_00001.1.el7eap < *; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8: 0:4.0.1-1.Final_redhat_00001.1.el8eap < *, 0:2.2.4-2.SP01_redhat_00001.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9: 0:4.0.1-1.Final_redhat_00001.1.el9eap < *, 0:2.2.4-2.SP01_redhat_00001.1.el9eap < *","last_modified":"2026-10-01T03:01:05.073Z","patch_url":"https://access.redhat.com/errata/RHSA-2024:3559","primary_source":"","published":"2024-04-09T07:01:47.673Z"},{"affected":"See the vendor and CVE records for the affected range.","affected_versions_present":false,"cve_id":"CVE-2023-4061","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-4061","fixed":"Red Hat JBoss Enterprise Application Platform: 15.0.32.Final-redhat-00001 < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8: 0:7.4.13-8.GA_redhat_00001.1.el8eap < *, 0:1.15.20-1.Final_redhat_00001.1.el8eap < *; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9: 0:7.4.13-8.GA_redhat_00001.1.el9eap < *, 0:1.15.20-1.Final_redhat_00001.1.el9eap < *; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7: 0:7.4.13-8.GA_redhat_00001.1.el7eap < *, 0:1.15.20-1.Final_redhat_00001.1.el7eap < *","last_modified":"2026-09-23T17:07:21.315Z","patch_url":"https://access.redhat.com/errata/RHSA-2023:5484","primary_source":"","published":"2023-11-08T00:56:05.124Z"},{"affected":"7.0.7.GA","affected_versions_present":true,"cve_id":"CVE-2017-12189","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-12189","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T18:28:16.689Z","patch_url":"https://access.redhat.com/errata/RHSA-2018:0002","primary_source":"","published":"2018-01-10T19:00:00.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Red Hat, Inc."}}