DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform (Undertow): Mehrere Schwachstellen
view advisory published 2026-01-08
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Zustand herbeizuführen, Daten zu manipulieren und um weitere Angriffe wie Cache-Poisoning und Session-Hijacking durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-12543US | critical9.6 | Exploit | ||
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header… | ||||
| CVE-2024-3884US | — | — | ||
A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large… | ||||
| CVE-2025-9784US | — | Exploit | ||
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset"… | ||||
02
references
External citations — patches, advisories, analysis.
- RedHat Security Advisory vom 2026-01-08external
- RedHat Security Advisory vom 2026-01-08external
- RedHat Security Advisory vom 2026-01-08external
- Red Hat Security Advisory RHSA-2026:33371 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:33372 vom 2026-06-30external
- Red Hat Security Advisory RHSA-2026:3889 vom 2026-03-05external
- Red Hat Security Advisory RHSA-2026:3890 vom 2026-03-05external
- Red Hat Security Advisory RHSA-2026:3891 vom 2026-03-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan