RHSA-2017%3A1254 — Vulnetix

RHSA-2017%3A1254 PUBLISHED CVSS 8.100000381469727 HIGH

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Risk Scores

CVSS 3.1

8.100000381469727

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
	hornetq
	picketlink
	hibernate4
	jboss
	jbossas
	ironjacamar
	resteasy
	httpserver
	jbossweb
	Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server
	picketbox

Exploit Intelligence

https://access.redhat.com/errata/RHSA-2017:1254 (circl)
https://access.redhat.com/security/updates/classification/#moderate (circl)
https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/ (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=1400644 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=1437092 (circl)
https://bugzilla.redhat.com/show_bug.cgi?id=1437095 (circl)
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1254.json (circl)

Timeline

May 18, 2017 CVE Published
Nov 21, 2025 CVE Updated
Apr 6, 2026 Distribution Patch
Apr 6, 2026 Distribution Patch
Apr 6, 2026 Security Advisory
Apr 30, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2017:1254 advisory
https://access.redhat.com/security/updates/classification/#moderate url
https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/ url
https://bugzilla.redhat.com/show_bug.cgi?id=1400644 url
https://bugzilla.redhat.com/show_bug.cgi?id=1437092 url
https://bugzilla.redhat.com/show_bug.cgi?id=1437095 url
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1254.json advisory

Open in Interactive Console →