P5Verified

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.18 security update

CVE-2024-29371, CVE-2025-12543, CVE-2025-13465, CVE-2025-15284, CVE-2025-23184, CVE-2025-23368, CVE-2025-66412, CVE-2025-69873, CVE-2025-9784, CVE-2026-1002, CVE-2026-24842 affects eap7-wildfly. EPSS 0.00257 (percentile 0.1577), scored 2026-10-03. Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap. Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap. Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap. Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap. Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap. Fixed version: 0:2.0.41-8.SP9_redhat_00001.1.el7eap.

CVE: CVE-2024-29371, CVE-2025-12543, CVE-2025-13465, CVE-2025-15284, CVE-2025-23184, CVE-2025-23368, CVE-2025-66412, CVE-2025-69873, CVE-2025-9784, CVE-2026-1002, CVE-2026-24842
Product: eap7-wildfly
CCR priority: 0.1 /100 (P5)
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L · OSV.dev
EPSS: 0.00257 · percentile 0.1577 · 2026-10-03
KEV: no

Affected products

eap7-wildfly · Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11 · Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk8 · Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap
eap7-wildfly-javadocs · Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap
eap7-wildfly-modules · Fixed version: 0:7.3.18-3.GA_redhat_00001.1.el7eap
eap7-undertow · Fixed version: 0:2.0.41-8.SP9_redhat_00001.1.el7eap
eap7-apache-cxf · Fixed version: 0:3.4.10-4.SP2_redhat_00004.1.el7eap
eap7-apache-cxf-rt · Fixed version: 0:3.4.10-4.SP2_redhat_00004.1.el7eap
eap7-apache-cxf-services · Fixed version: 0:3.4.10-4.SP2_redhat_00004.1.el7eap
eap7-apache-cxf-tools · Fixed version: 0:3.4.10-4.SP2_redhat_00004.1.el7eap

Provenance

OSV.dev · Source record · observed 2026-10-04 13:35:46.972631+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2024-29371.html