RHSA-2025:22187

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2025-4949
Published: 27 Nov 2025, 10:04
Last modified:07 May 2026, 10:04

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.8 MEDIUM
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Nov 2025, 10:04
Published
Vulnerability first disclosed
07 May 2026, 10:04
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.2 security update

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.8CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Affected Systems

  • redhat•eap8-activemq-artemis

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-cli

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-commons

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-core-client

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-dto

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-hornetq-protocol

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-hqclient-protocol

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-jakarta-client

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-jakarta-ra

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-jakarta-server

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-jakarta-service-extensions

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-jdbc-store

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-journal

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-selector

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-activemq-artemis-server

    < 0:2.40.0-3.redhat_00008.1.el8eap

  • redhat•eap8-angus-activation

    < 0:2.0.2-2.redhat_00002.1.el8eap

  • redhat•eap8-antlr4

    < 0:4.13.2-1.redhat_00001.1.el8eap

  • redhat•eap8-antlr4-runtime

    < 0:4.13.2-1.redhat_00001.1.el8eap

  • redhat•eap8-apache-commons-io

    < 0:2.16.1-2.redhat_00002.1.el8eap

  • redhat•eap8-apache-commons-lang

    < 0:3.18.0-2.redhat_00003.1.el8eap

  • redhat•eap8-atinject

    < 0:2.0.1-5.redhat_00007.1.el8eap

  • redhat•eap8-eap-product-conf-parent

    < 0:801.2.0-1.GA_redhat_00001.1.el8eap

  • redhat•eap8-eap-product-conf-wildfly-ee-feature-pack

    < 0:801.2.0-1.GA_redhat_00001.1.el8eap

  • redhat•eap8-eclipse-jgit

    < 0:6.10.1.202505221210-1.r_redhat_00002.1.el8eap

  • redhat•eap8-hal-console

    < 0:3.7.16-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate

    < 0:6.6.31-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-core

    < 0:6.6.31-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-envers

    < 0:6.6.31-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-backend-elasticsearch

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-backend-lucene

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-engine

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-mapper-orm

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-mapper-pojo-base

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-hibernate-search-util-common

    < 0:7.2.4-1.Final_redhat_00001.1.el8eap

  • redhat•eap8-httpcomponents-client

    < 0:4.5.14-5.redhat_00016.1.el8eap

  • redhat•eap8-httpcomponents-core

    < 0:4.4.16-6.redhat_00011.1.el8eap

  • redhat•eap8-infinispan

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cachestore-jdbc

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cachestore-jdbc-common

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cachestore-remote

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cdi-common

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cdi-embedded

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-cdi-remote

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-client-hotrod

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-clustered-counter

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-clustered-lock

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-commons

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-core

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

  • redhat•eap8-infinispan-hibernate-cache-commons

    < 0:15.0.21-1.Final_redhat_00002.1.el8eap

Showing first 50 affected entries in server-rendered view.

References (40)