{"schemaVersion":3,"id":"RHSA-2026:73976","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.16 security update","dates":{"published":"2026-10-01T10:21:11.000Z","modified":"2026-10-20T10:15:23.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.3,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.3,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","exploitability":4.1,"impact":10,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"eap7-hibernate","name":"eap7-hibernate","label":"eap7-hibernate","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-hibernate-core","name":"eap7-hibernate-core","label":"eap7-hibernate-core","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate-core","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-hibernate-entitymanager","name":"eap7-hibernate-entitymanager","label":"eap7-hibernate-entitymanager","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate-entitymanager","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-hibernate-envers","name":"eap7-hibernate-envers","label":"eap7-hibernate-envers","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate-envers","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-hibernate-infinispan","name":"eap7-hibernate-infinispan","label":"eap7-hibernate-infinispan","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate-infinispan","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-hibernate-java8","name":"eap7-hibernate-java8","label":"eap7-hibernate-java8","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-hibernate-java8","purlType":"rpm","versions":[{"text":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:5.1.17-5.Final_redhat_00006.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-netty","name":"eap7-netty","label":"eap7-netty","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-netty","purlType":"rpm","versions":[{"text":"< 0:4.1.63-4.Final_redhat_00005.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.1.63-4.Final_redhat_00005.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-netty-all","name":"eap7-netty-all","label":"eap7-netty-all","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-netty-all","purlType":"rpm","versions":[{"text":"< 0:4.1.63-4.Final_redhat_00005.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.1.63-4.Final_redhat_00005.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-wildfly","name":"eap7-wildfly","label":"eap7-wildfly","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-wildfly","purlType":"rpm","versions":[{"text":"< 0:7.1.16-1.GA_redhat_00002.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.1.16-1.GA_redhat_00002.1.ep7.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"eap7-wildfly-modules","name":"eap7-wildfly-modules","label":"eap7-wildfly-modules","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/eap7-wildfly-modules","purlType":"rpm","versions":[{"text":"< 0:7.1.16-1.GA_redhat_00002.1.ep7.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.1.16-1.GA_redhat_00002.1.ep7.el7","eol":null,"hubHref":null}],"affectedCount":10,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:73976","label":"access.redhat.com/errata/RHSA-2026:73976","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","label":"docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","hostname":"docs.redhat.com","tags":["ARTICLE"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","label":"docs.redhat.com/en/…","hostname":"docs.redhat.com","tags":["ARTICLE"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/7.1.0_release_notes/index","label":"docs.redhat.com/en/…","hostname":"docs.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442671","label":"bugzilla.redhat.com/show_bug.cgi?id=2442671","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2442908","label":"bugzilla.redhat.com/show_bug.cgi?id=2442908","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477219","label":"bugzilla.redhat.com/show_bug.cgi?id=2477219","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477224","label":"bugzilla.redhat.com/show_bug.cgi?id=2477224","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477226","label":"bugzilla.redhat.com/show_bug.cgi?id=2477226","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477227","label":"bugzilla.redhat.com/show_bug.cgi?id=2477227","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2477232","label":"bugzilla.redhat.com/show_bug.cgi?id=2477232","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://issues.redhat.com/browse/JBEAP-33911","label":"issues.redhat.com/browse/JBEAP-33911","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://issues.redhat.com/browse/JBEAP-34006","label":"issues.redhat.com/browse/JBEAP-34006","hostname":"issues.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73976.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73976.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27727","label":"access.redhat.com/security/cve/CVE-2026-27727","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27727","label":"www.cve.org/CVERecord?id=CVE-2026-27727","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27727","label":"nvd.nist.gov/vuln/detail/CVE-2026-27727","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44","label":"github.com/swaldman/mchange-commons-java/security/advisories/GHSA-m2cm-222f-qw44","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal","label":"mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal","hostname":"mogwailabs.de","tags":["ARTICLE"]},{"url":"https://www.mchange.com/projects/c3p0/#configuring_security","label":"www.mchange.com/projects/c3p0/","hostname":"www.mchange.com","tags":["ARTICLE"]},{"url":"https://www.mchange.com/projects/c3p0/#security-note","label":"www.mchange.com/projects/c3p0/","hostname":"www.mchange.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-27830","label":"access.redhat.com/security/cve/CVE-2026-27830","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-27830","label":"www.cve.org/CVERecord?id=CVE-2026-27830","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27830","label":"nvd.nist.gov/vuln/detail/CVE-2026-27830","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e","label":"github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv","label":"github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42578","label":"access.redhat.com/security/cve/CVE-2026-42578","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42578","label":"www.cve.org/CVERecord?id=CVE-2026-42578","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42578","label":"nvd.nist.gov/vuln/detail/CVE-2026-42578","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr","label":"github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jr","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42581","label":"access.redhat.com/security/cve/CVE-2026-42581","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42581","label":"www.cve.org/CVERecord?id=CVE-2026-42581","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42581","label":"nvd.nist.gov/vuln/detail/CVE-2026-42581","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9","label":"github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42583","label":"access.redhat.com/security/cve/CVE-2026-42583","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42583","label":"www.cve.org/CVERecord?id=CVE-2026-42583","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42583","label":"nvd.nist.gov/vuln/detail/CVE-2026-42583","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6","label":"github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42584","label":"access.redhat.com/security/cve/CVE-2026-42584","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42584","label":"www.cve.org/CVERecord?id=CVE-2026-42584","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42584","label":"nvd.nist.gov/vuln/detail/CVE-2026-42584","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3","label":"github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42585","label":"access.redhat.com/security/cve/CVE-2026-42585","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42585","label":"www.cve.org/CVERecord?id=CVE-2026-42585","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42585","label":"nvd.nist.gov/vuln/detail/CVE-2026-42585","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv","label":"github.com/netty/netty/security/advisories/GHSA-38f8-5428-x5cv","hostname":"github.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2026-27727","CVE-2026-27830","CVE-2026-42578","CVE-2026-42581","CVE-2026-42583","CVE-2026-42584","CVE-2026-42585"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-01T10:21:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-20T10:15:23.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T13:45:01.044Z","stale":false,"partial":false}}