Is JBoss 4.2.0.CP09 patched?
Current stable (8.1.9): 97/100
4.2.0.CP09 has 3 open critical-or-high vulnerabilities. Run 7.2.4 or later to clear them. See what 7.2.4 fixes →
Upgrade impact: Major upgrade (3 major versions). Crossing a major version usually means breaking changes. Review the vendor’s upgrade / migration guide and test before you roll it out.
Summary iPlain-English security status for JBoss 4.2.0.CP09, built from its CVEs, active-exploitation data, end-of-life date and latest release.
JBoss 4.2.0.CP09 is part of the 4.2 release line. 26 known vulnerabilities affect it. The minimum safe version is 7.2.4 — upgrade to it or later to clear the open critical/high issues. The 4.2 line reached end-of-life on 2012-06-30, so it no longer receives security patches. The latest supported JBoss release is 8.1.9.
Known issues affecting 4.2.0.CP09
Exploited first, then by exploitation probability.
CVE-2010-1429 MEDIUM EPSS 54% → see advisory CVE-2014-3481 MEDIUM EPSS 3% → see advisory CVE-2015-5220 MEDIUM EPSS 3% → see advisory CVE-2011-4085 MEDIUM EPSS 3% → see advisory CVE-2016-5406 HIGH EPSS 3% → see advisory CVE-2016-4993 MEDIUM EPSS 3% → see advisory CVE-2011-4610 MEDIUM EPSS 2% → see advisory CVE-2013-2133 MEDIUM EPSS 2% → see advisory CVE-2015-5304 LOW EPSS 2% → see advisory CVE-2016-7061 LOW EPSS 2% → fixed in 7.0.4 CVE-2014-7827 LOW EPSS 2% → see advisory CVE-2015-1849 MEDIUM EPSS 2% → see advisory CVE-2015-5178 MEDIUM EPSS 2% → see advisory CVE-2019-19343 HIGH EPSS 2% → fixed in 7.2.4 CVE-2008-3519 MEDIUM EPSS 2% → see advisory CVE-2020-14299 MEDIUM EPSS 1% → fixed in 5.0.3 CVE-2012-4549 MEDIUM EPSS 1% → see advisory CVE-2014-7853 MEDIUM EPSS 1% → see advisory CVE-2015-5188 MEDIUM EPSS 1% → see advisory CVE-2019-14885 MEDIUM EPSS 1% → fixed in 7.2.6Other JBoss versions
Check another release line of JBoss.
Frequently asked
Is JBoss 4.2.0.CP09 patched?
JBoss 4.2.0.CP09 is end-of-life and no longer receives security patches. Move to 8.1.9.
What version should I upgrade JBoss 4.2.0.CP09 to?
Upgrade JBoss 4.2.0.CP09 to at least 7.2.4 to clear its 3 open critical-or-high vulnerabilities.
When does JBoss 4.2 reach end-of-life?
JBoss 4.2 reached end-of-life on 2012-06-30 and no longer receives security patches.
What is the latest version of JBoss?
The latest supported JBoss release is 8.1.9.
Is JBoss 4.2.0.CP09 still receiving security updates?
No — JBoss 4.2.0.CP09 is on the 4.2 line, which reached end-of-life on 2012-06-30 and no longer receives security updates. Upgrade to 8.1.9 or later to stay supported.
Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Red Hat's official advisory before you patch or upgrade.