Red Hat JBoss Web Server 7.0 on RHEL 8 vulnerabilities

2 known vulnerabilities in Red Hat JBoss Web Server 7.0 on RHEL 8 from Red Hat. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache Tomcat Missing Encryption of Sensitive Data Exploited

  CVE-2026-34486Apr 9, 2026ApacheEPSS 98.5%

  Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to version 11.0.2

• 7.5 High severity

  Apache Tomcat: Generation of Error Message Containing Sensitive Information

  CVE-2026-29146Apr 9, 2026ApacheEPSS 8.85%

  Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.1