title: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update
description: velocity: arbitrary code execution when attacker is able to modify templates h2: Remote Code Execution in Console log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value minimist: prototype pollution log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228) SnakeYaml: Constructor Deserialization Remote Code Execution codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE mina-sshd: Java unsafe deserialization vulnerability jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos CXF: directory listing / code exfiltration
cpes: cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7