Important: Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.5 release and security update

🗓️ 01 Oct 2026 16:23:53Reported by RedHatType

redhat🔗 access.redhat.com👁 1 Views

Red Hat JBoss Web Server contains multiple vulnerabilities in Apache Tomcat.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM ApplinX is vulnerable to multiple issues like improper Access control, Authentication Bypass, Improper Authorization and more due to the use of Apache-Tomcat .	22 Sep 202612:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by multiple CVEs	14 Sep 202609:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	9 Sep 202609:46	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Oct 202609:42	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	8 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1x) is affected by multiple critical vulnerabilities in OpenSSL, Java SE, and Jetty	11 Aug 202609:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Netezza Appliance	7 Aug 202612:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL	17 Sep 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	24 Aug 202622:36	–	ibm

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
docs	www.docs.redhat.com/en/documentation/red_hat_jboss_web_server/6.2/html/red_hat_jboss_web_server_6.2_service_pack_5_release_notes/index

01 Oct 2026 17:17Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.3 - 9.8

EPSS0.04002

SSVC

Red Hat JBoss Web Server Apache Tomcat security constraint bypass information disclosure denial of service unauthorized resource access