Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.5 release and security update
Red Hat JBoss Web Server 5.8.5 includes multiple security fixes addressing denial of service (DoS) vulnerabilities and a security constraint bypass in Apache Tomcat and related components. These vulnerabilities affect the handling of multipart uploads, part headers in Apache Commons FileUpload, and resource constraints in Tomcat. The update replaces version 5.8.4 and is rated with moderate security impact by Red Hat Product Security.
AI Analysis
Technical Summary
Red Hat JBoss Web Server 5.8.5 addresses several moderate severity vulnerabilities in its Apache Tomcat components, including multiple denial of service issues (CVE-2025-48988, CVE-2025-48976, CVE-2025-52434, CVE-2025-52520, CVE-2025-53506) and a security constraint bypass (CVE-2025-49125). These vulnerabilities relate to multipart upload processing, part header handling in Apache Commons FileUpload, and pre/post-resource security constraints in Tomcat. The advisory replaces version 5.8.4 with 5.8.5, which includes bug fixes, enhancements, and component upgrades. The update is available for Red Hat Enterprise Linux 7, 8, and 9. No known exploits in the wild have been reported at this time.
Potential Impact
Successful exploitation of these vulnerabilities could allow an attacker to cause denial of service conditions in the Apache Tomcat server components or bypass security constraints, potentially impacting availability and security enforcement of hosted Java web applications. The overall security impact is rated as moderate by Red Hat Product Security.
Mitigation Recommendations
Red Hat has released Red Hat JBoss Web Server 5.8.5 as a security update that addresses these vulnerabilities. Users should apply this update to affected systems running Red Hat Enterprise Linux 7, 8, or 9. Before applying this update, ensure all previously released errata relevant to the system have been applied. Refer to the official Red Hat advisory RHSA-2025:11695 for detailed update instructions. Patch status is confirmed with an official fix available.
Red Hat Security Advisory: Red Hat JBoss Web Server 5.8.5 release and security update
Description
Red Hat JBoss Web Server 5.8.5 includes multiple security fixes addressing denial of service (DoS) vulnerabilities and a security constraint bypass in Apache Tomcat and related components. These vulnerabilities affect the handling of multipart uploads, part headers in Apache Commons FileUpload, and resource constraints in Tomcat. The update replaces version 5.8.4 and is rated with moderate security impact by Red Hat Product Security.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat JBoss Web Server 5.8.5 addresses several moderate severity vulnerabilities in its Apache Tomcat components, including multiple denial of service issues (CVE-2025-48988, CVE-2025-48976, CVE-2025-52434, CVE-2025-52520, CVE-2025-53506) and a security constraint bypass (CVE-2025-49125). These vulnerabilities relate to multipart upload processing, part header handling in Apache Commons FileUpload, and pre/post-resource security constraints in Tomcat. The advisory replaces version 5.8.4 with 5.8.5, which includes bug fixes, enhancements, and component upgrades. The update is available for Red Hat Enterprise Linux 7, 8, and 9. No known exploits in the wild have been reported at this time.
Potential Impact
Successful exploitation of these vulnerabilities could allow an attacker to cause denial of service conditions in the Apache Tomcat server components or bypass security constraints, potentially impacting availability and security enforcement of hosted Java web applications. The overall security impact is rated as moderate by Red Hat Product Security.
Mitigation Recommendations
Red Hat has released Red Hat JBoss Web Server 5.8.5 as a security update that addresses these vulnerabilities. Users should apply this update to affected systems running Red Hat Enterprise Linux 7, 8, or 9. Before applying this update, ensure all previously released errata relevant to the system have been applied. Refer to the official Red Hat advisory RHSA-2025:11695 for detailed update instructions. Patch status is confirmed with an official fix available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:11695
- Cve Count
- 6
- Additional Cves
- ["CVE-2025-48988","CVE-2025-49125","CVE-2025-52434","CVE-2025-52520","CVE-2025-53506"]
- Cvss Version
- null
Threat ID: 6a419cb927e9c79719abe356
Added to database: 06/28/2026, 22:14:17 UTC
Last enriched: 06/28/2026, 22:34:10 UTC
Last updated: 07/09/2026, 07:54:18 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.