RHSA-2025:1747: eap7-hal-console Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 24-02-2025Last modified 14-10-2026

Open JSON

Vulnerability summary

RHSA-2025:1747 is a critical (CVSS 9.8) vulnerability in eap7-hal-console Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 13 · Downstream 0

CVE-2020-13936 CVE-2021-42392 CVE-2021-44228 CVE-2021-44906 CVE-2021-45046 CVE-2022-1471+7 more

Timeline

24-02-2025
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat41 products

eap7-hal-console< 0:3.2.17-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-core< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-databind< 0:2.10.4-4.redhat_00004.1.el7eap
eap7-jackson-datatype-jdk8< 0:2.10.4-2.redhat_00004.1.el7eap

eap7-jackson-datatype-jsr310< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-base< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-json-provider< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-jaxrs-providers< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jackson-module-jaxb-annotations< 0:2.10.4-4.redhat_00004.1.el7eap
eap7-jackson-modules-base< 0:2.10.4-4.redhat_00004.1.el7eap
eap7-jackson-modules-java8< 0:2.10.4-2.redhat_00004.1.el7eap
eap7-jettison< 0:1.5.2-2.redhat_00002.1.el7eap
eap7-netty< 0:4.1.63-4.Final_redhat_00002.1.el7eap
eap7-netty-all< 0:4.1.63-4.Final_redhat_00002.1.el7eap
eap7-resteasy< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-atom-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-cdi< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-client< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-client-microprofile< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-crypto< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jackson-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jackson2-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jaxb-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jaxrs< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jettison-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jose-jwt< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-jsapi< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-json-binding-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-json-p-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-multipart-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-rxjava2< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-spring< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-validator-provider-11< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-resteasy-yaml-provider< 0:3.11.6-1.Final_redhat_00001.1.el7eap
eap7-snakeyaml< 0:1.33.0-1.SP1_redhat_00001.1.el7eap
eap7-wildfly< 0:7.3.12-3.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11< 0:7.3.12-3.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8< 0:7.3.12-3.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs< 0:7.3.12-3.GA_redhat_00002.1.el7eap
eap7-wildfly-modules< 0:7.3.12-3.GA_redhat_00002.1.el7eap

Show all 41

1 vendor · 41 products

References

72 links

Show all 72 references

bugzilla.redhat.com/show_bug.cgi?id=2135244REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135247REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135435REPORT
bugzilla.redhat.com/show_bug.cgi?id=2145194REPORT
bugzilla.redhat.com/show_bug.cgi?id=2150009REPORT
bugzilla.redhat.com/show_bug.cgi?id=2153379REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155681REPORT
bugzilla.redhat.com/show_bug.cgi?id=2155970REPORT
issues.redhat.com/browse/JBEAP-28581ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1747.jsonAdvisory
access.redhat.com/security/cve/CVE-2020-13936REPORT
www.cve.org/CVERecord?id=CVE-2020-13936Advisory
nvd.nist.gov/vuln/detail/CVE-2020-13936Advisory
access.redhat.com/security/cve/CVE-2021-42392REPORT
www.cve.org/CVERecord?id=CVE-2021-42392Advisory
nvd.nist.gov/vuln/detail/CVE-2021-42392Advisory
github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6ARTICLE
access.redhat.com/security/cve/CVE-2021-44228ARTICLE
www.cve.org/CVERecord?id=CVE-2021-44228Advisory
nvd.nist.gov/vuln/detail/CVE-2021-44228Advisory
github.com/advisories/GHSA-jfh8-c2jp-5v3qAdvisory
logging.apache.org/log4j/2.x/security.htmlARTICLE
www.lunasec.io/docs/blog/log4j-zero-day/ARTICLE
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLE
access.redhat.com/security/cve/CVE-2021-44906REPORT
www.cve.org/CVERecord?id=CVE-2021-44906Advisory
nvd.nist.gov/vuln/detail/CVE-2021-44906Advisory
github.com/advisories/GHSA-xvch-5gv4-984hAdvisory
access.redhat.com/security/cve/CVE-2021-45046REPORT
www.cve.org/CVERecord?id=CVE-2021-45046Advisory
nvd.nist.gov/vuln/detail/CVE-2021-45046Advisory
www.openwall.com/lists/oss-security/2021/12/14/4ARTICLE
access.redhat.com/security/cve/CVE-2022-1471REPORT
www.cve.org/CVERecord?id=CVE-2022-1471Advisory
nvd.nist.gov/vuln/detail/CVE-2022-1471Advisory
github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2ARTICLE
access.redhat.com/security/cve/CVE-2022-41881REPORT
www.cve.org/CVERecord?id=CVE-2022-41881Advisory
nvd.nist.gov/vuln/detail/CVE-2022-41881Advisory
access.redhat.com/security/cve/CVE-2022-42003REPORT
www.cve.org/CVERecord?id=CVE-2022-42003Advisory
nvd.nist.gov/vuln/detail/CVE-2022-42003Advisory
access.redhat.com/security/cve/CVE-2022-42004REPORT
www.cve.org/CVERecord?id=CVE-2022-42004Advisory
nvd.nist.gov/vuln/detail/CVE-2022-42004Advisory
access.redhat.com/security/cve/CVE-2022-42889REPORT
www.cve.org/CVERecord?id=CVE-2022-42889Advisory
nvd.nist.gov/vuln/detail/CVE-2022-42889Advisory
blogs.apache.org/security/entry/cve-2022-42889ARTICLE
lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1omARTICLE
seclists.org/oss-sec/2022/q4/22ARTICLE
access.redhat.com/security/cve/CVE-2022-45047REPORT
www.cve.org/CVERecord?id=CVE-2022-45047Advisory
nvd.nist.gov/vuln/detail/CVE-2022-45047Advisory
www.mail-archive.com/dev@mina.apache.org/msg39312.htmlARTICLE
access.redhat.com/security/cve/CVE-2022-45693REPORT
www.cve.org/CVERecord?id=CVE-2022-45693Advisory
nvd.nist.gov/vuln/detail/CVE-2022-45693Advisory
access.redhat.com/security/cve/CVE-2022-46363REPORT
www.cve.org/CVERecord?id=CVE-2022-46363Advisory
nvd.nist.gov/vuln/detail/CVE-2022-46363Advisory
lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8cARTICLE