Product
Denial of Service Vulnerability in Red Hat WildFly and JBoss EAP
1 TTP 1 CVEA vulnerability in Red Hat WildFly and JBoss Enterprise Application Platform allows a remote, unauthenticated attacker to trigger a denial-of-service condition.
Unauthenticated Remote Code Execution in Red Hat JBoss EAP via openjdk-orb
5 TTPs 4 CVEsCVE-2026-15560 allows unauthenticated remote code execution in Red Hat JBoss EAP environments configured with the -secmgr flag due to insecure object unmarshalling.
Red Hat JBoss Enterprise Application Platform Cross-Site Scripting Vulnerability
1 TTPA remote, unauthenticated attacker can exploit a Cross-Site Scripting (XSS) vulnerability in the 'io.undertow.jastow' component of Red Hat JBoss Enterprise Application Platform, allowing injection of malicious scripts into web pages which can lead to session hijacking, data theft, or defacement.
Red Hat JBoss Enterprise Application Platform: Multiple Vulnerabilities
5 TTPsMultiple vulnerabilities in Red Hat JBoss Enterprise Application Platform allow a remote, unauthenticated attacker to execute arbitrary code, perform cross-site scripting (XSS) attacks, disclose sensitive information, cause a denial of service, or bypass security mechanisms, posing a significant risk of system compromise and data exposure.