CVE-2025-12543

Published Jan 7, 2026

Last updated a month ago

CVSS critical 9.6

Undertow

WildFly

JBoss EAP

Overview

Description: A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
Source: secalert@redhat.com
NVD status: Modified
Products: build_of_apache_camel, data_grid, fuse, jboss_enterprise_application_platform, jboss_enterprise_application_platform_expansion_pack, process_automation, single_sign-on, undertow

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.6
Impact score: 6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

secalert@redhat.com: CWE-20

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:redhat:build_of_apache_camel:*:*:*:*:*:spring_boot:*:*",
            "matchCriteriaId": "07091FB7-A140-4D8E-BDB8-1EC9CF463F53",
            "versionEndExcluding": "4.14.4",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:data_grid:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "7095200A-4DAC-4433-99E8-86CA88E1E4D4",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:fuse:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "AAD91726-93D9-4230-BF69-6A79B58E09E0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "7D2DF1E8-9000-4FB5-9EA8-138D8FB3E2CA",
            "versionEndExcluding": "8.0.12",
            "versionStartIncluding": "8.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "47585EEB-2EB2-42D6-B06E-290BCE788A9F",
            "versionEndExcluding": "8.1.3",
            "versionStartIncluding": "8.1.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*",
            "matchCriteriaId": "B8423D7F-3A8F-4AD8-BF51-245C9D8DD816",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "72A54BDA-311C-413B-8E4D-388AD65A170A",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "0A24CBFB-4900-47A5-88D2-A44C929603DC",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "20A6B40D-F991-4712-8E30-5FE008505CB7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId": "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "FD2DF681-F91C-41CD-8031-1A0ABC2EF051",
            "versionEndExcluding": "2.2.39",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "1F2313BE-DB2E-4F91-9F8D-6428B276037A",
            "versionEndExcluding": "2.3.21",
            "versionStartIncluding": "2.3.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

Related CVEs

References