Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-48734

27
FAUCET Score

CVE-2025-48734 is an Improper Access Control vulnerability in Apache Commons BeanUtils versions 1.x before 1.11.0 and 2.x before 2.0.0-M2. An attacker can exploit this by passing external property paths to getProperty() or getNestedProperty(), gaining access to an enum's class loader via the "declaredClass" property, which can lead to arbitrary code execution. This vulnerability is rated 8.8 HIGH (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 1.0, < 1.11.0CPE matchmatch criteria
cpe:2.3:a:apache:commons_beanutils:*:*:*:*:*:*:*:*
2.0.0CPE matchmatch criteria
cpe:2.3:a:apache:commons_beanutils:2.0.0:milestone1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.55%
Probability of exploitation in next 30 days
EPSS Percentile
72.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0155 is in the 70th percentile among its peer group of 17,829 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (169)

gcppatch availablevia llm_extracted
View patch
mavenpatch availablevia ghsa
Product: org.apache.commons:commons-beanutils2Fixed in: 2.0.0-M2
mavenpatch availablevia ghsa
Product: commons-beanutils:commons-beanutilsFixed in: 1.11.0
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-grafana-dashboard-rhel9:4.0.1-3
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-openshift-console-plugin-rhel9:4.0.1-2
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-operator-bundle:4.0.1-1
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-ose-oauth-proxy-rhel9:4.0.1-4
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-reports-rhel9:4.0.1-2
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-rhel9:4.0.1-2
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-rhel9-operator:4.0.1-4
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-storage-rhel9:4.0.1-4
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/jfr-datasource-rhel9:4.0.1-2
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.12-RHEL-8Fixed in: jenkins-0:2.516.2.1756902453-3.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.12-RHEL-8Fixed in: jenkins-2-plugins-0:4.12.1756902839-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.13-RHEL-8Fixed in: jenkins-0:2.516.2.1756902120-3.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.13-RHEL-8Fixed in: jenkins-2-plugins-0:4.13.1756901992-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.14-RHEL-8Fixed in: jenkins-0:2.516.2.1757087588-3.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.14-RHEL-8Fixed in: jenkins-2-plugins-0:4.14.1757087858-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.15-RHEL-8Fixed in: jenkins-0:2.516.2.1756738247-3.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.15-RHEL-8Fixed in: jenkins-2-plugins-0:4.15.1756735456-1.el8
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.16-RHEL-9Fixed in: jenkins-0:2.516.2.1756733848-3.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.16-RHEL-9Fixed in: jenkins-2-plugins-0:4.16.1756734507-1.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.17-RHEL-9Fixed in: jenkins-0:2.516.2.1756732303-3.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.17-RHEL-9Fixed in: jenkins-2-plugins-0:4.17.1756732064-1.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.18-RHEL-9Fixed in: jenkins-0:2.516.2.1756731431-3.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.18-RHEL-9Fixed in: jenkins-2-plugins-0:4.18.1756731677-1.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.19-RHEL-9Fixed in: jenkins-0:2.516.2.1756903379-3.el9
View patch
redhatpatch availablevia redhat_api
Product: OCP-Tools-4.19-RHEL-9Fixed in: jenkins-2-plugins-0:4.19.1756901647-1.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Broker 7.12.5Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Red Hat AMQ Broker 7.13.1Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Red Hat build of Apache Camel 4.10.3 for Spring Boot 3.4.7Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20Fixed in: quarkus-camel-bom
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Build of Apache Camel 4.10 for Quarkus 3.20Fixed in: quarkus-cxf-bom
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: apache-commons-beanutils-0:1.9.4-21.el10_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: apache-commons-beanutils-0:1.8.3-15.el7_9.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: javapackages-tools:201801-8100020250616113255.88f2bc72
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: apache-commons-beanutils-0:1.9.4-10.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: apache-commons-beanutils-0:1.9.4-9.el9_4.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-hibernate-validator-0:5.3.6-1.SP1_redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-hornetq-0:2.4.11-1.Final_redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-undertow-0:1.4.18-17.SP15_redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.1.12-2.GA_redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-hornetq-0:2.4.11-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.7.2-19.Final_redhat_00020.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-undertow-0:2.0.41-5.SP6_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.3.15-5.GA_redhat_00003.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4.22
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4.23
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-activemq-artemis-0:2.16.0-21.redhat_00055.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-apache-cxf-0:3.5.10-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-artemis-native-1:1.0.2-5.redhat_00004.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-elytron-web-0:1.9.6-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-glassfish-jsf-0:2.3.14-9.SP10_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-hal-console-0:3.3.27-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-hibernate-validator-0:6.0.23-3.SP2_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-ironjacamar-0:1.5.21-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jboss-server-migration-0:1.10.0-42.Final_redhat_00042.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-jbossws-cxf-0:5.4.15-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-wildfly-0:7.4.23-3.GA_redhat_00002.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-wildfly-elytron-0:1.15.26-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-netty-0:4.1.119-1.Final_redhat_00004.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-netty-transport-native-epoll-0:4.1.119-1.Final_redhat_00004.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-wildfly-0:7.4.21-3.GA_29548_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-activemq-artemis-0:2.16.0-21.redhat_00055.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-apache-cxf-0:3.5.10-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-artemis-native-1:1.0.2-5.redhat_00004.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-elytron-web-0:1.9.6-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-glassfish-jsf-0:2.3.14-9.SP10_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-hal-console-0:3.3.27-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-hibernate-validator-0:6.0.23-3.SP2_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-ironjacamar-0:1.5.21-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jboss-server-migration-0:1.10.0-42.Final_redhat_00042.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-jbossws-cxf-0:5.4.15-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-wildfly-0:7.4.23-3.GA_redhat_00002.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-wildfly-elytron-0:1.15.26-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-netty-0:4.1.119-1.Final_redhat_00004.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-netty-transport-native-epoll-0:4.1.119-1.Final_redhat_00004.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-wildfly-0:7.4.21-3.GA_29548_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Fixed in: eap7-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-activemq-artemis-0:2.16.0-21.redhat_00055.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-apache-cxf-0:3.5.10-1.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-artemis-native-1:1.0.2-5.redhat_00004.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-elytron-web-0:1.9.6-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-glassfish-jsf-0:2.3.14-9.SP10_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-hal-console-0:3.3.27-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-hibernate-validator-0:6.0.23-3.SP2_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-ironjacamar-0:1.5.21-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jboss-server-migration-0:1.10.0-42.Final_redhat_00042.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-jbossws-cxf-0:5.4.15-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-wildfly-0:7.4.23-3.GA_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-wildfly-elytron-0:1.15.26-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-netty-0:4.1.119-1.Final_redhat_00004.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-netty-transport-native-epoll-0:4.1.119-1.Final_redhat_00004.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-wildfly-0:7.4.21-3.GA_29548_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0.8Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0.8Fixed in: org.jboss.eap-jboss-eap-xp
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-activemq-artemis-0:2.33.0-3.redhat_00017.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-cxf-0:4.0.6-2.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-apache-mime4j-0:0.8.12-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-eap-product-conf-parent-0:800.8.0-1.GA_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-elytron-web-0:4.0.3-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-fastinfoset-0:2.1.1-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hal-console-0:3.6.24-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-hibernate-0:6.2.36-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-httpcomponents-asyncclient-0:4.1.5-4.redhat_00006.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jboss-remoting-0:5.0.31-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-jbossws-cxf-0:7.3.3-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-narayana-0:6.0.6-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-neethi-0:3.2.1-1.redhat_00002.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-reactivex-rxjava2-0:2.2.21-3.redhat_00002.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-slf4j-0:2.0.17-1.redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-velocity-0:2.3.0-4.redhat_00010.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-0:8.0.8-4.GA_redhat_00006.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Fixed in: eap8-wildfly-elytron-0:2.2.11-1.Final_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-activemq-artemis-0:2.33.0-3.redhat_00017.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-commons-beanutils-0:1.11.0-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-cxf-0:4.0.6-2.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-apache-mime4j-0:0.8.12-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-elytron-web-0:4.0.3-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-fastinfoset-0:2.1.1-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hal-console-0:3.6.24-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-hibernate-0:6.2.36-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-httpcomponents-asyncclient-0:4.1.5-4.redhat_00006.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jboss-remoting-0:5.0.31-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-jbossws-cxf-0:7.3.3-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-narayana-0:6.0.6-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-neethi-0:3.2.1-1.redhat_00002.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-reactivex-rxjava2-0:2.2.21-3.redhat_00002.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-slf4j-0:2.0.17-1.redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-velocity-0:2.3.0-4.redhat_00010.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-0:8.0.8-4.GA_redhat_00006.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-wildfly-elytron-0:2.2.11-1.Final_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Streams for Apache Kafka 2.9.1Fixed in: commons-beanutils
View patch
redhatpatch availablevia redhat_api
Product: Streams for Apache Kafka 3.0.0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Fixed in: eap8-eap-product-conf-parent-0:800.8.0-1.GA_redhat_00001.1.el9eap
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-agent-init-rhel9:0.5.1-1
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 4 on RHEL 9Fixed in: cryostat/cryostat-db-rhel9:4.0.1-4
View patch
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (focal)Fixed in: 1.9.4-1ubuntu0.20.04.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (jammy)Fixed in: 1.9.4-1+deb11u1build0.22.04.1
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (noble)Fixed in: 1.9.4-2ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (trusty)Fixed in: 1.9.1-1ubuntu0.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (xenial)Fixed in: 1.9.2-3ubuntu0.1~esm1
ubuntupatch availablevia ubuntu_usn
Product: commons-beanutils (bionic)Fixed in: 1.9.3-1ubuntu0.1~esm2
redhatno patchvia redhat_api
Product: Red Hat build of Apicurio Registry 2Fixed in: commons-beanutils
redhatno patchvia redhat_api
Product: streams for Apache KafkaFixed in: commons-beanutils-core
redhatno patchvia redhat_api
Product: Red Hat build of Apicurio Registry 3Fixed in: commons-beanutils
redhatno patchvia redhat_api
Product: Red Hat build of OptaPlanner 8Fixed in: commons-beanutils
redhatno patchvia redhat_api
Product: Red Hat Process Automation 7Fixed in: commons-beanutils
redhatno patchvia redhat_api
Product: Red Hat Process Automation 7Fixed in: commons-beanutils-core
redhatno patchvia redhat_api
Product: streams for Apache KafkaFixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: commons-beanutils-core
redhatend of lifevia redhat_api
Product: A-MQ Clients 2Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: A-MQ Clients 2Fixed in: commons-beanutils-core
redhatend of lifevia redhat_api
Product: Red Hat build of Debezium 2Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat build of Debezium 2Fixed in: commons-beanutils-core
redhatend of lifevia redhat_api
Product: Red Hat build of Debezium 3Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat build of Debezium 3Fixed in: commons-beanutils-core
redhatend of lifevia redhat_api
Product: Red Hat Data Grid 8Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat Data Grid 8Fixed in: commons-beanutils-core
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: AMQ ClientsFixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat Integration Camel K 1Fixed in: commons-beanutils
redhatend of lifevia redhat_api
Product: Red Hat Integration Camel K 1Fixed in: commons-beanutils-core

Vendor Advisories (4)

ubuntuUSN-8322-1

Apache Commons BeanUtils vulnerability

May 27, 2026
gcpllm-gcp-e028ccdedcbc6cccCRITICAL

HP Device Manager Vulnerability Update (5.0.16)

Mar 9, 2026
mavenGHSA-wxr5-93ph-8wr9high

Apache Commons Improper Access Control vulnerability

May 28, 2025
redhatCVE-2025-48734Important

commons-beanutils: Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

May 28, 2025

References

lists.debian.org / debian-lts-announce/2025/06/msg00027.html
openwall.com / lists/oss-security/2025/05/28/6
Mailing ListThird Party Advisory
lists.apache.org / thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
Mailing ListVendor Advisory