CVE-2023-4503: Red Hat JBoss Enterprise Application Platform

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.

Affected products

• Red Hat JBoss Enterprise Application Platform: affected versions not specified; version 7.4 only
• Red Hat JBoss Enterprise Application Platform Expansion Pack: affected versions not specified

Published 2024-02-06. Last modified 2026-06-17.