RHSA-2025:4437: eap7-activemq-artemis Red Hat

CVSS: 7.5v3.1HighPublished

Published 05-05-2025Last modified 14-10-2026

Open JSON

Vulnerability summary

RHSA-2025:4437 is a high (CVSS 7.5) vulnerability in eap7-activemq-artemis Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0

CVE-2022-0084 CVE-2022-23913 CVE-2022-24785 CVE-2022-25647 CVE-2022-25857 CVE-2022-40149+2 more

Timeline

05-05-2025
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.13 security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat47 products

eap7-activemq-artemis< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-cli< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-commons< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-core-client< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-dto< 0:2.9.0-10.redhat_00021.1.el7eap

eap7-activemq-artemis-hornetq-protocol< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-hqclient-protocol< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-jdbc-store< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-jms-client< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-jms-server< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-journal< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-ra< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-selector< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-server< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-service-extensions< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-activemq-artemis-tools< 0:2.9.0-10.redhat_00021.1.el7eap
eap7-gson< 0:2.8.9-1.redhat_00001.1.el7eap
eap7-hal-console< 0:3.2.18-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-cli< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-core< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap6.4< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.3< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap7.0< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap7.1< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap7.2< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap7.2-to-eap7.3< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-eap7.3-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly10.0< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly10.1< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly11.0< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly12.0< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly13.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly14.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly15.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly16.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly17.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly18.0-server< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly8.2< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-server-migration-wildfly9.0< 0:1.7.2-14.Final_redhat_00015.1.el7eap
eap7-jboss-xnio-base< 0:3.7.14-3.Final_redhat_00001.1.el7eap
eap7-wildfly< 0:7.3.13-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11< 0:7.3.13-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8< 0:7.3.13-4.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs< 0:7.3.13-4.GA_redhat_00002.1.el7eap
eap7-wildfly-modules< 0:7.3.13-4.GA_redhat_00002.1.el7eap
eap7-woodstox-core< 0:6.4.0-1.redhat_00001.1.el7eap

Show all 47

1 vendor · 47 products

References

44 links

Show all 44 references

bugzilla.redhat.com/show_bug.cgi?id=2134291REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135770REPORT
bugzilla.redhat.com/show_bug.cgi?id=2135771REPORT
issues.redhat.com/browse/JBEAP-29297ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4437.jsonAdvisory
access.redhat.com/security/cve/CVE-2022-0084REPORT
www.cve.org/CVERecord?id=CVE-2022-0084Advisory
nvd.nist.gov/vuln/detail/CVE-2022-0084Advisory
access.redhat.com/security/cve/CVE-2022-23913REPORT
www.cve.org/CVERecord?id=CVE-2022-23913Advisory
nvd.nist.gov/vuln/detail/CVE-2022-23913Advisory
lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2ARTICLE
access.redhat.com/security/cve/CVE-2022-24785REPORT
www.cve.org/CVERecord?id=CVE-2022-24785Advisory
nvd.nist.gov/vuln/detail/CVE-2022-24785Advisory
github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4ARTICLE
access.redhat.com/security/cve/CVE-2022-25647REPORT
www.cve.org/CVERecord?id=CVE-2022-25647Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25647Advisory
access.redhat.com/security/cve/CVE-2022-25857REPORT
www.cve.org/CVERecord?id=CVE-2022-25857Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25857Advisory
bitbucket.org/snakeyaml/snakeyaml/issues/525ARTICLE
access.redhat.com/security/cve/CVE-2022-40149REPORT
www.cve.org/CVERecord?id=CVE-2022-40149Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40149Advisory
github.com/jettison-json/jettison/releases/tag/jettison-1.5.1ARTICLE
access.redhat.com/security/cve/CVE-2022-40150REPORT
www.cve.org/CVERecord?id=CVE-2022-40150Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40150Advisory
access.redhat.com/security/cve/CVE-2022-40152REPORT
www.cve.org/CVERecord?id=CVE-2022-40152Advisory
nvd.nist.gov/vuln/detail/CVE-2022-40152Advisory
github.com/advisories/GHSA-3f7h-mf4q-vrm4Advisory