Vulnerability Lookup

🛡️ RHSA-2020:2060

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 8 security update

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-09-29

Updated 2026-06-02

Modified 2026-05-15

Fix URL N/A

Affected Packages

Software	From version	Fixed in
eap7-activemq-artemis	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-cli	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-commons	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-core-client	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-dto	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-hornetq-protocol	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-hqclient-protocol	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-jdbc-store	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-jms-client	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-jms-server	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-journal	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-ra	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-selector	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-server	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-service-extensions	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-activemq-artemis-tools	—	0:2.9.0-4.redhat_00010.1.el8eap
eap7-apache-cxf	—	0:3.2.12-1.redhat_00001.1.el8eap
eap7-apache-cxf-rt	—	0:3.2.12-1.redhat_00001.1.el8eap
eap7-apache-cxf-services	—	0:3.2.12-1.redhat_00001.1.el8eap
eap7-apache-cxf-tools	—	0:3.2.12-1.redhat_00001.1.el8eap
eap7-bouncycastle	—	0:1.60.0-2.redhat_00002.1.el8eap
eap7-bouncycastle-mail	—	0:1.60.0-2.redhat_00002.1.el8eap
eap7-bouncycastle-pkix	—	0:1.60.0-2.redhat_00002.1.el8eap
eap7-bouncycastle-prov	—	0:1.60.0-2.redhat_00002.1.el8eap
eap7-codehaus-jackson	—	0:1.9.13-10.redhat_00007.1.el8eap
eap7-codehaus-jackson-core-asl	—	0:1.9.13-10.redhat_00007.1.el8eap
eap7-codehaus-jackson-jaxrs	—	0:1.9.13-10.redhat_00007.1.el8eap
eap7-codehaus-jackson-mapper-asl	—	0:1.9.13-10.redhat_00007.1.el8eap
eap7-codehaus-jackson-xc	—	0:1.9.13-10.redhat_00007.1.el8eap
eap7-cryptacular	—	0:1.2.4-1.redhat_00001.1.el8eap
eap7-glassfish-el	—	0:3.0.1-5.b08_redhat_00004.1.el8eap
eap7-glassfish-el-impl	—	0:3.0.1-5.b08_redhat_00004.1.el8eap
eap7-glassfish-javamail	—	0:1.6.2-2.redhat_00001.1.el8eap
eap7-glassfish-jsf	—	0:2.3.5-10.SP3_redhat_00008.1.el8eap
eap7-hal-console	—	0:3.0.21-1.Final_redhat_00001.1.el8eap
eap7-hibernate-commons-annotations	—	0:5.0.5-1.Final_redhat_00002.1.el8eap
eap7-hibernate-search	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jgroups	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jms	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search-engine	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search-orm	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search-serialization-avro	—	0:5.10.7-1.Final_redhat_00001.1.el8eap
eap7-httpcomponents-client	—	0:4.5.4-1.redhat_00001.1.el8eap
eap7-httpcomponents-core	—	0:4.4.5-1.redhat_00001.1.el8eap
eap7-jackson-databind	—	0:2.9.10.2-2.redhat_00002.1.el8eap
eap7-jasypt	—	0:1.9.3-1.redhat_00001.1.el8eap
eap7-javaee-security-soteria	—	0:1.0.0-3.redhat_00002.1.el8eap
eap7-javaee-security-soteria-enterprise	—	0:1.0.0-3.redhat_00002.1.el8eap
eap7-jaxbintros	—	0:1.0.3-1.GA_redhat_00001.1.el8eap
eap7-jboss-batch-api-1.0-spec	—	0:1.0.2-1.Final_redhat_00001.1.el8eap
eap7-jboss-classfilewriter	—	0:1.2.4-1.Final_redhat_00001.1.el8eap
eap7-jboss-common-beans	—	0:2.0.1-1.Final_redhat_00001.1.el8eap
eap7-jboss-ejb-api-3.2-spec	—	0:1.0.2-1.Final_redhat_00001.1.el8eap
eap7-jboss-ejb-client	—	0:4.0.31-1.Final_redhat_00001.1.el8eap
eap7-jboss-invocation	—	0:1.5.2-1.Final_redhat_00001.1.el8eap
eap7-jboss-jsf-api-2.3-spec	—	0:2.3.5-5.SP2_redhat_00003.1.el8eap
eap7-jboss-modules	—	0:1.8.9-1.Final_redhat_00001.1.el8eap
eap7-jboss-openjdk-orb	—	0:8.1.4-3.Final_redhat_00002.1.el8eap
eap7-jboss-remoting	—	0:5.0.18-1.Final_redhat_00001.1.el8eap
eap7-jboss-remoting-jmx	—	0:3.0.4-1.Final_redhat_00001.1.el8eap
eap7-jboss-security-negotiation	—	0:3.0.6-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-cli	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-core	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap6.4	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap6.4-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap7.0	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap7.0-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap7.1	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap7.1-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly10.0	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly10.0-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly10.1	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly10.1-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly11.0	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly11.0-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly12.0	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly12.0-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly13.0-server	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly14.0-server	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly8.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly8.2-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly9.0	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-server-migration-wildfly9.0-to-eap7.2	—	0:1.3.1-10.Final_redhat_00011.1.el8eap
eap7-jboss-threads	—	0:2.3.3-1.Final_redhat_00001.1.el8eap
eap7-jboss-websocket-api-1.1-spec	—	0:1.1.4-1.Final_redhat_00001.1.el8eap
eap7-jbossws-common	—	0:3.2.3-1.Final_redhat_00001.1.el8eap
eap7-jgroups	—	0:4.0.20-2.Final_redhat_00002.1.el8eap
eap7-jgroups-azure	—	0:1.2.1-1.Final_redhat_00001.1.el8eap
eap7-jgroups-kubernetes	—	0:1.0.13-1.Final_redhat_00001.1.el8eap
eap7-mod-cluster	—	0:1.4.1-1.Final_redhat_00001.1.el8eap
eap7-narayana	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-compensations	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-jbosstxbridge	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-jbossxts	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-jts-idlj	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-jts-integration	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-restat-api	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-restat-bridge	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-restat-integration	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-restat-util	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-narayana-txframework	—	0:5.9.8-1.Final_redhat_00002.1.el8eap
eap7-opensaml	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-core	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-profile-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-saml-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-saml-impl	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-security-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-security-impl	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-soap-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xacml-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xacml-impl	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xacml-saml-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xacml-saml-impl	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xmlsec-api	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-opensaml-xmlsec-impl	—	0:3.3.1-1.redhat_00002.1.el8eap
eap7-picketbox	—	0:5.0.3-7.Final_redhat_00006.1.el8eap
eap7-picketbox-infinispan	—	0:5.0.3-7.Final_redhat_00006.1.el8eap
eap7-resteasy	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-atom-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-cdi	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-client	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-client-microprofile	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-crypto	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jackson-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jackson2-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jaxb-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jaxrs	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jettison-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jose-jwt	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-jsapi	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-json-binding-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-json-p-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-multipart-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-rxjava2	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-spring	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-validator-provider-11	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-resteasy-yaml-provider	—	0:3.6.1-9.SP8_redhat_00001.1.el8eap
eap7-slf4j-jboss-logmanager	—	0:1.0.4-1.GA_redhat_00001.1.el8eap
eap7-smallrye-config	—	0:1.3.6-1.SP01_redhat_00001.1.el8eap
eap7-smallrye-health	—	0:1.0.2-2.redhat_00002.1.el8eap
eap7-undertow	—	0:2.0.30-2.SP2_redhat_00001.1.el8eap
eap7-weld-cdi-2.0-api	—	0:2.0.0-4.SP1_redhat_00004.1.el8eap
eap7-wildfly	—	0:7.2.8-3.GA_redhat_00002.1.el8eap
eap7-wildfly-elytron	—	0:1.6.6-1.Final_redhat_00001.1.el8eap
eap7-wildfly-javadocs	—	0:7.2.8-3.GA_redhat_00002.1.el8eap
eap7-wildfly-modules	—	0:7.2.8-3.GA_redhat_00002.1.el8eap
eap7-wildfly-naming-client	—	0:1.0.12-1.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-client	—	0:1.1.10-1.Final_redhat_00001.1.el8eap
eap7-ws-commons-xmlschema	—	0:2.2.4-1.redhat_00001.1.el8eap
eap7-wss4j	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-bindings	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-policy	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-ws-security-common	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-ws-security-dom	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-ws-security-policy-stax	—	0:2.2.5-1.redhat_00001.1.el8eap
eap7-wss4j-ws-security-stax	—	0:2.2.5-1.redhat_00001.1.el8eap

References

ADVISORY https://access.redhat.com/errata/RHSA-2020:2060

ARTICLE https://access.redhat.com/security/updates/classification/#important

ARTICLE https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/

ARTICLE https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1715075

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1752770

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1796617

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1797006

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1797011

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1801380

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1801726

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1802444

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1803241

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1807305

REPORT https://bugzilla.redhat.com/show_bug.cgi?id=1828459

ARTICLE https://issues.redhat.com/browse/JBEAP-18071

ARTICLE https://issues.redhat.com/browse/JBEAP-18267

ARTICLE https://issues.redhat.com/browse/JBEAP-18278

ARTICLE https://issues.redhat.com/browse/JBEAP-18423

ARTICLE https://issues.redhat.com/browse/JBEAP-18438

ARTICLE https://issues.redhat.com/browse/JBEAP-18503

ARTICLE https://issues.redhat.com/browse/JBEAP-18506

ARTICLE https://issues.redhat.com/browse/JBEAP-18536

ARTICLE https://issues.redhat.com/browse/JBEAP-18595

ARTICLE https://issues.redhat.com/browse/JBEAP-18616

ARTICLE https://issues.redhat.com/browse/JBEAP-18628

ARTICLE https://issues.redhat.com/browse/JBEAP-18631

ARTICLE https://issues.redhat.com/browse/JBEAP-18639

ARTICLE https://issues.redhat.com/browse/JBEAP-18646

ARTICLE https://issues.redhat.com/browse/JBEAP-18652

ARTICLE https://issues.redhat.com/browse/JBEAP-18664

ARTICLE https://issues.redhat.com/browse/JBEAP-18724

ARTICLE https://issues.redhat.com/browse/JBEAP-18729

ARTICLE https://issues.redhat.com/browse/JBEAP-18787

ARTICLE https://issues.redhat.com/browse/JBEAP-18789

ARTICLE https://issues.redhat.com/browse/JBEAP-18817

ARTICLE https://issues.redhat.com/browse/JBEAP-18827

ARTICLE https://issues.redhat.com/browse/JBEAP-18835

ARTICLE https://issues.redhat.com/browse/JBEAP-18885

ARTICLE https://issues.redhat.com/browse/JBEAP-18887

ARTICLE https://issues.redhat.com/browse/JBEAP-18931

ARTICLE https://issues.redhat.com/browse/JBEAP-18988

ARTICLE https://issues.redhat.com/browse/JBEAP-18989

ARTICLE https://issues.redhat.com/browse/JBEAP-19233

ARTICLE https://issues.redhat.com/browse/JBEAP-19234

ADVISORY https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2060.json

REPORT https://access.redhat.com/security/cve/CVE-2019-10172

ADVISORY https://www.cve.org/CVERecord?id=CVE-2019-10172

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-10172

REPORT https://access.redhat.com/security/cve/CVE-2019-12423

ADVISORY https://www.cve.org/CVERecord?id=CVE-2019-12423

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-12423

REPORT https://access.redhat.com/security/cve/CVE-2019-17573

ADVISORY https://www.cve.org/CVERecord?id=CVE-2019-17573

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-17573

REPORT https://access.redhat.com/security/cve/CVE-2020-1719

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-1719

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1719

REPORT https://access.redhat.com/security/cve/CVE-2020-1729

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-1729

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1729

REPORT https://access.redhat.com/security/cve/CVE-2020-1732

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-1732

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1732

REPORT https://access.redhat.com/security/cve/CVE-2020-1745

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-1745

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1745

ARTICLE https://meterpreter.org/cve-2020-1938-apache-tomcat-ajp-connector-remote-code-execution-vulnerability-alert/

ARTICLE https://www.cnvd.org.cn/webinfo/show/5415

ARTICLE https://www.tenable.com/blog/cve-2020-1938-ghostcat-apache-tomcat-ajp-file-readinclusion-vulnerability-cnvd-2020-10487

REPORT https://access.redhat.com/security/cve/CVE-2020-1757

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-1757

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-1757

REPORT https://access.redhat.com/security/cve/CVE-2020-7226

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-7226

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-7226

REPORT https://access.redhat.com/security/cve/CVE-2020-10705

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-10705

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-10705

REPORT https://access.redhat.com/security/cve/CVE-2020-10719

ADVISORY https://www.cve.org/CVERecord?id=CVE-2020-10719

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-10719

🔗 NVD 🔗 Mitre

Similar Threats

Unknown RHSA-2017:1410
Unknown RHSA-2017:1411
Unknown RHSA-2017:1834
Unknown RHSA-2017:3454
Unknown RHSA-2017:3455

Free Vulnerability Check

Is your WordPress site affected?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Is your WordPress site affected?

Company

Resources

Services

Trusted

Subscribe