CVE-2016-7065: Red Hat JBoss Enterprise Application Platform

High severity, CVSS 8.8. EPSS: 12.5% chance of exploitation in the next 30 days.

The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.

Affected products

• Red Hat JBoss Enterprise Application Platform: version 4.0.0 only; version 5.0.0 only

Published 2016-10-13. Last modified 2026-06-17.