{"schemaVersion":3,"id":"RHSA-2022:1296","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.4 security update","dates":{"published":"2024-09-29T19:09:38.000Z","modified":"2026-10-13T10:02:58.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"eap7-log4j","name":"eap7-log4j","label":"eap7-log4j","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-log4j","purlType":"rpm","versions":[{"text":"< 0:2.17.1-1.redhat_00001.1.el7eap","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.17.1-1.redhat_00001.1.el7eap","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2022:1296","label":"access.redhat.com/errata/RHSA-2022:1296","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","label":"access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","label":"access.redhat.com/documentation/…","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","label":"bugzilla.redhat.com/show_bug.cgi?id=2031667","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032580","label":"bugzilla.redhat.com/show_bug.cgi?id=2032580","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034067","label":"bugzilla.redhat.com/show_bug.cgi?id=2034067","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2035951","label":"bugzilla.redhat.com/show_bug.cgi?id=2035951","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041949","label":"bugzilla.redhat.com/show_bug.cgi?id=2041949","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","label":"bugzilla.redhat.com/show_bug.cgi?id=2041959","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","label":"bugzilla.redhat.com/show_bug.cgi?id=2041967","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://issues.redhat.com/browse/JBEAP-22105","label":"issues.redhat.com/browse/JBEAP-22105","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22385","label":"issues.redhat.com/browse/JBEAP-22385","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22731","label":"issues.redhat.com/browse/JBEAP-22731","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22738","label":"issues.redhat.com/browse/JBEAP-22738","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22819","label":"issues.redhat.com/browse/JBEAP-22819","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22839","label":"issues.redhat.com/browse/JBEAP-22839","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22864","label":"issues.redhat.com/browse/JBEAP-22864","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22899","label":"issues.redhat.com/browse/JBEAP-22899","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22904","label":"issues.redhat.com/browse/JBEAP-22904","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22911","label":"issues.redhat.com/browse/JBEAP-22911","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22912","label":"issues.redhat.com/browse/JBEAP-22912","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22913","label":"issues.redhat.com/browse/JBEAP-22913","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22935","label":"issues.redhat.com/browse/JBEAP-22935","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22945","label":"issues.redhat.com/browse/JBEAP-22945","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-22973","label":"issues.redhat.com/browse/JBEAP-22973","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23038","label":"issues.redhat.com/browse/JBEAP-23038","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23040","label":"issues.redhat.com/browse/JBEAP-23040","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23045","label":"issues.redhat.com/browse/JBEAP-23045","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23101","label":"issues.redhat.com/browse/JBEAP-23101","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23105","label":"issues.redhat.com/browse/JBEAP-23105","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23143","label":"issues.redhat.com/browse/JBEAP-23143","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23177","label":"issues.redhat.com/browse/JBEAP-23177","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23323","label":"issues.redhat.com/browse/JBEAP-23323","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23373","label":"issues.redhat.com/browse/JBEAP-23373","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23374","label":"issues.redhat.com/browse/JBEAP-23374","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-23375","label":"issues.redhat.com/browse/JBEAP-23375","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1296.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1296.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","label":"access.redhat.com/security/cve/CVE-2021-4104","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","label":"access.redhat.com/security/vulnerabilities/RHSB-2021-009","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","label":"www.cve.org/CVERecord?id=CVE-2021-4104","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","label":"nvd.nist.gov/vuln/detail/CVE-2021-4104","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","label":"github.com/apache/logging-log4j2/pull/608","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","label":"github.com/apache/logging-log4j2/pull/608","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","label":"lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","hostname":"lists.apache.org","tags":["ARTICLE"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","label":"www.openwall.com/lists/oss-security/2021/12/13/1","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44832","label":"access.redhat.com/security/cve/CVE-2021-44832","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44832","label":"www.cve.org/CVERecord?id=CVE-2021-44832","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44832","label":"nvd.nist.gov/vuln/detail/CVE-2021-44832","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://issues.apache.org/jira/browse/LOG4J2-3293","label":"issues.apache.org/jira/browse/LOG4J2-3293","hostname":"issues.apache.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45046","label":"access.redhat.com/security/cve/CVE-2021-45046","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45046","label":"www.cve.org/CVERecord?id=CVE-2021-45046","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45046","label":"nvd.nist.gov/vuln/detail/CVE-2021-45046","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44228","label":"access.redhat.com/security/cve/CVE-2021-44228","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://logging.apache.org/log4j/2.x/security.html","label":"logging.apache.org/log4j/2.x/security.html","hostname":"logging.apache.org","tags":["ARTICLE"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/14/4","label":"www.openwall.com/lists/oss-security/2021/12/14/4","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45105","label":"access.redhat.com/security/cve/CVE-2021-45105","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45105","label":"www.cve.org/CVERecord?id=CVE-2021-45105","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45105","label":"nvd.nist.gov/vuln/detail/CVE-2021-45105","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://issues.apache.org/jira/browse/LOG4J2-3230","label":"issues.apache.org/jira/browse/LOG4J2-3230","hostname":"issues.apache.org","tags":["ARTICLE"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/19/1","label":"www.openwall.com/lists/oss-security/2021/12/19/1","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23302","label":"access.redhat.com/security/cve/CVE-2022-23302","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23302","label":"www.cve.org/CVERecord?id=CVE-2022-23302","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23302","label":"nvd.nist.gov/vuln/detail/CVE-2022-23302","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/3","label":"www.openwall.com/lists/oss-security/2022/01/18/3","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","label":"access.redhat.com/security/cve/CVE-2022-23305","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","label":"www.cve.org/CVERecord?id=CVE-2022-23305","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","label":"nvd.nist.gov/vuln/detail/CVE-2022-23305","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","label":"www.openwall.com/lists/oss-security/2022/01/18/4","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","label":"access.redhat.com/security/cve/CVE-2022-23307","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","label":"www.cve.org/CVERecord?id=CVE-2022-23307","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","label":"nvd.nist.gov/vuln/detail/CVE-2022-23307","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","label":"www.openwall.com/lists/oss-security/2022/01/18/5","hostname":"www.openwall.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2021-4104","CVE-2021-44832","CVE-2021-45046","CVE-2021-45105","CVE-2022-23302","CVE-2022-23305","CVE-2022-23307"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-29T19:09:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-13T10:02:58.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T04:45:03.172Z","stale":false,"partial":false}}