RHSA-2025:3990

Advisory lineage Upstream: 2 Downstream: 0
Published: 06 Dec 2025, 10:04
Last modified:01 May 2026, 10:36

Vulnerability Summary

Overall Risk (default)
medium
26/100
CVSS Score
6.5 MEDIUM
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Dec 2025, 10:04
Published
Vulnerability first disclosed
01 May 2026, 10:36
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.7 security update

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Systems

  • redhat•eap8-apache-commons-io

    < 0:2.16.1-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle-jmail

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle-pg

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle-pkix

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle-prov

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-bouncycastle-util

    < 0:1.80.0-1.redhat_00001.1.el9eap

  • redhat•eap8-eap-product-conf-parent

    < 0:800.7.0-2.GA_redhat_00002.1.el9eap

  • redhat•eap8-eap-product-conf-wildfly-ee-feature-pack

    < 0:800.7.0-2.GA_redhat_00002.1.el9eap

  • redhat•eap8-hibernate

    < 0:6.2.35-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-hibernate-core

    < 0:6.2.35-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-hibernate-envers

    < 0:6.2.35-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-common-api

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-common-impl

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-common-spi

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-core-api

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-core-impl

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-deployers-common

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-jdbc

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-ironjacamar-validator

    < 0:3.0.13-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-jakarta-enterprise-concurrent

    < 0:3.0.1-1.redhat_00001.1.el9eap

  • redhat•eap8-jsf-impl

    < 0:4.0.11-1.redhat_00001.1.el9eap

  • redhat•eap8-reactive-streams

    < 0:1.0.4-3.redhat_00004.1.el9eap

  • redhat•eap8-reactivex-rxjava

    < 0:3.1.10-1.redhat_00001.1.el9eap

  • redhat•eap8-weld-core

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-core-impl

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-core-jsf

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-ejb

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-jta

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-lite-extension-translator

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-weld-web

    < 0:5.1.5-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-wildfly

    < 0:8.0.7-3.GA_redhat_00004.1.el9eap

  • redhat•eap8-wildfly-elytron

    < 0:2.2.9-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-wildfly-elytron-tool

    < 0:2.2.9-1.Final_redhat_00001.1.el9eap

  • redhat•eap8-wildfly-java-jdk11

    < 0:8.0.7-3.GA_redhat_00004.1.el9eap

  • redhat•eap8-wildfly-java-jdk17

    < 0:8.0.7-3.GA_redhat_00004.1.el9eap

  • redhat•eap8-wildfly-java-jdk21

    < 0:8.0.7-3.GA_redhat_00004.1.el9eap

  • redhat•eap8-wildfly-modules

    < 0:8.0.7-3.GA_redhat_00004.1.el9eap

References (32)