title: Red Hat Security Advisory: EAP XP 1 security update to CVE fixes in the EAP 7.3.x base
description: guava: local information disclosure via temporary directory created with unsafe permissions velocity: arbitrary code execution when attacker is able to modify templates bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client undertow: Possible regression in fix for CVE-2020-10687 wildfly: Information disclosure due to publicly accessible privileged actions in JBoss EJB Client netty: Information disclosure via the local system temporary directory
cpes: cpe:/a:redhat:jbosseapxp