title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update
description: cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding netty-codec-http: Allocation of Resources Without Limits or Throttling org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class
cpes: cpe:/a:redhat:jboss_enterprise_application_platform:8.0