CVE & CISA-KEV CatalogNVD
CVE-2024-12369
MEDIUM4.2
CVSS v3
Description
A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack.
How to fix
Remediation Available
eap8-apache-commons-ioRed Hat / RHEL
Fixed in:0:2.16.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.16.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.16.1-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:2.16.1-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-apache-commons-ioRocky
Fixed in:0:2.16.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.16.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.16.1-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:2.16.1-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastleRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastleRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-jmailRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-jmailRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-pgRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-pgRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-pkixRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-pkixRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-provRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-provRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-utilRed Hat / RHEL
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-bouncycastle-utilRocky
Fixed in:0:1.80.0-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:1.80.0-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-eap-product-conf-parentRed Hat / RHEL
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
eap8-eap-product-conf-parentRocky
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
eap8-eap-product-conf-wildfly-ee-feature-packRocky
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat / RHEL
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el8eapRHSA-2025:3989
Fixed in:0:800.7.0-2.GA_redhat_00002.1.el9eapRHSA-2025:3990
eap8-hibernateRed Hat / RHEL
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-hibernateRocky
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-hibernate-coreRocky
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-hibernate-coreRed Hat / RHEL
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-hibernate-enversRocky
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-hibernate-enversRed Hat / RHEL
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:6.2.35-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamarRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamarRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-apiRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-apiRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-implRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-implRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-spiRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-common-spiRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-core-apiRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-core-apiRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-core-implRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-core-implRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-deployers-commonRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-deployers-commonRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-jdbcRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-jdbcRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-validatorRed Hat / RHEL
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-ironjacamar-validatorRocky
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.13-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-jakarta-enterprise-concurrentRed Hat / RHEL
Fixed in:0:3.0.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.1-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.0.1-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-jakarta-enterprise-concurrentRocky
Fixed in:0:3.0.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.1-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.0.1-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.0.1-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-jsf-implRed Hat / RHEL
Fixed in:0:4.0.11-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:4.0.11-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:4.0.11-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:4.0.11-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-jsf-implRocky
Fixed in:0:4.0.11-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:4.0.11-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:4.0.11-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:4.0.11-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-reactive-streamsRed Hat / RHEL
Fixed in:0:1.0.4-3.redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:1.0.4-3.redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:1.0.4-3.redhat_00004.1.el9eapRHSA-2025:3990
Fixed in:0:1.0.4-3.redhat_00004.1.el9eapRHSA-2025:3990
eap8-reactive-streamsRocky
Fixed in:0:1.0.4-3.redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:1.0.4-3.redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:1.0.4-3.redhat_00004.1.el9eapRHSA-2025:3990
Fixed in:0:1.0.4-3.redhat_00004.1.el9eapRHSA-2025:3990
eap8-reactivex-rxjavaRocky
Fixed in:0:3.1.10-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.1.10-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.1.10-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.1.10-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-reactivex-rxjavaRed Hat / RHEL
Fixed in:0:3.1.10-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.1.10-1.redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:3.1.10-1.redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:3.1.10-1.redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-coreRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-coreRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-core-implRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-core-implRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-core-jsfRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-core-jsfRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-ejbRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-ejbRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-jtaRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-jtaRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-lite-extension-translatorRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-lite-extension-translatorRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-webRocky
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-weld-webRed Hat / RHEL
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:5.1.5-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-wildflyRocky
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildflyRed Hat / RHEL
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-elytronRocky
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-wildfly-elytronRed Hat / RHEL
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-wildfly-elytron-toolRocky
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-wildfly-elytron-toolRed Hat / RHEL
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el8eapRHSA-2025:3989
Fixed in:0:2.2.9-1.Final_redhat_00001.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk11Rocky
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk11Red Hat / RHEL
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk17Red Hat / RHEL
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk17Rocky
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk21Red Hat / RHEL
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-java-jdk21Rocky
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-modulesRed Hat / RHEL
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
eap8-wildfly-modulesRocky
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el8eapRHSA-2025:3989
Fixed in:0:8.0.7-3.GA_redhat_00004.1.el9eapRHSA-2025:3990
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Exploit Intelligence
0.25%probability of exploitation in 30 days
16thpercentile
Low risk: more likely to be exploited than 16% of all known CVEs.
References
Related Vulnerabilities
Other CWE-345 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2023-38831 | High | 7.8 | 98% | KEV + Ransom | Fix |
| CVE-2016-4553 | High | 8.6 | 80% | - | Fix |
| CVE-2016-4554 | High | 8.6 | 39% | - | Fix |
| CVE-2023-35719 | Medium | 6.8 | 26% | - | - |
| CVE-2022-26871 | Critical | 9.8 | 20% | KEV | - |
| CVE-2014-4936 | High | 9.3 | 17% | - | - |
Embed a live status badge for CVE-2024-12369
Markdown
[](https://tridentstack.com/cve/CVE-2024-12369)HTML
<a href="https://tridentstack.com/cve/CVE-2024-12369"><img src="https://tridentstack.com/cve/badge/CVE-2024-12369.svg" alt="CVE-2024-12369"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-01-26.