Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kk1t-t63f-rqg2
Summary
Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests. As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.
Aliases
0
alias CVE-2025-12543
1
alias GHSA-j382-5jj3-vw4j
Fixed_packages
0
url pkg:maven/io.undertow/undertow-core@2.2.39.Final
purl pkg:maven/io.undertow/undertow-core@2.2.39.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5585-a76n-zubf
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.undertow/undertow-core@2.2.39.Final
1
url pkg:maven/io.undertow/undertow-core@2.3.21.Final
purl pkg:maven/io.undertow/undertow-core@2.3.21.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.undertow/undertow-core@2.3.21.Final
Affected_packages
0
url pkg:maven/io.undertow/undertow-core@2.3.0.Alpha1
purl pkg:maven/io.undertow/undertow-core@2.3.0.Alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vrj-chs2-d3ab
1
vulnerability VCID-2cv5-9v62-kfbm
2
vulnerability VCID-5585-a76n-zubf
3
vulnerability VCID-brsa-ygcs-wudx
4
vulnerability VCID-bsd5-k44s-buhu
5
vulnerability VCID-d3ty-z2dg-vka1
6
vulnerability VCID-df16-86dz-nfc9
7
vulnerability VCID-huxp-ctsp-fqay
8
vulnerability VCID-kk1t-t63f-rqg2
9
vulnerability VCID-ns3p-22xg-q3bz
10
vulnerability VCID-whcc-r17q-gffx
11
vulnerability VCID-xftw-raz7-b7e1
12
vulnerability VCID-xme8-usmd-vqg3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.undertow/undertow-core@2.3.0.Alpha1
1
url pkg:maven/io.undertow/undertow-core@2.4.0.Alpha1
purl pkg:maven/io.undertow/undertow-core@2.4.0.Alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-whcc-r17q-gffx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/io.undertow/undertow-core@2.4.0.Alpha1
2
url pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1%3Farch=el9eap
3
url pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1%3Farch=el7eap
4
url pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.39-1.Final_redhat_00001.1%3Farch=el8eap
5
url pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el7eap
purl pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rvj-nz7h-m7ek
1
vulnerability VCID-8p2e-63th-gqge
2
vulnerability VCID-huxp-ctsp-fqay
3
vulnerability VCID-kk1t-t63f-rqg2
4
vulnerability VCID-ns3p-22xg-q3bz
5
vulnerability VCID-pwnn-qx48-ykae
6
vulnerability VCID-qh9g-f6d2-zkeg
7
vulnerability VCID-qqu7-yqc6-rqab
8
vulnerability VCID-wnc6-kzv8-3qen
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1%3Farch=el7eap
6
url pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el8eap
purl pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rvj-nz7h-m7ek
1
vulnerability VCID-8p2e-63th-gqge
2
vulnerability VCID-huxp-ctsp-fqay
3
vulnerability VCID-kk1t-t63f-rqg2
4
vulnerability VCID-ns3p-22xg-q3bz
5
vulnerability VCID-pwnn-qx48-ykae
6
vulnerability VCID-qh9g-f6d2-zkeg
7
vulnerability VCID-qqu7-yqc6-rqab
8
vulnerability VCID-wnc6-kzv8-3qen
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1%3Farch=el8eap
7
url pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el9eap
purl pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4rvj-nz7h-m7ek
1
vulnerability VCID-8p2e-63th-gqge
2
vulnerability VCID-huxp-ctsp-fqay
3
vulnerability VCID-kk1t-t63f-rqg2
4
vulnerability VCID-ns3p-22xg-q3bz
5
vulnerability VCID-pwnn-qx48-ykae
6
vulnerability VCID-qh9g-f6d2-zkeg
7
vulnerability VCID-qqu7-yqc6-rqab
8
vulnerability VCID-wnc6-kzv8-3qen
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.24-4.GA_redhat_00002.1%3Farch=el9eap
8
url pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1%3Farch=el8eap
9
url pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-apache-cxf@4.0.10-1.redhat_00001.1%3Farch=el9eap
10
url pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
3
vulnerability VCID-qh9g-f6d2-zkeg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1%3Farch=el8eap
11
url pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
3
vulnerability VCID-qh9g-f6d2-zkeg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-bouncycastle@1.82.0-1.redhat_00001.1%3Farch=el9eap
12
url pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1%3Farch=el8eap
13
url pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-bouncycastle@1.83.0-1.redhat_00001.1%3Farch=el9eap
14
url pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1%3Farch=el8eap
15
url pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eap-product-conf-parent@801.3.0-1.GA_redhat_00001.1%3Farch=el9eap
16
url pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1?arch=el8eap
purl pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1%3Farch=el8eap
17
url pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1?arch=el9eap
purl pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eventstream@1.0.1-3.redhat_00003.1%3Farch=el9eap
18
url pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1?arch=el9eap
purl pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1%3Farch=el9eap
19
url pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1?arch=el8eap
purl pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-guava-libraries@33.0.0-2.jre_redhat_00003.1%3Farch=el8eap
20
url pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1%3Farch=el9eap
21
url pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-hibernate@6.6.36-1.Final_redhat_00001.1%3Farch=el8eap
22
url pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1%3Farch=el9eap
23
url pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jaxb@4.0.6-1.redhat_00001.1%3Farch=el8eap
24
url pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
3
vulnerability VCID-qh9g-f6d2-zkeg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1%3Farch=el9eap
25
url pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
3
vulnerability VCID-qh9g-f6d2-zkeg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jboss-el-api_5.0_spec@4.0.2-1.Final_redhat_00001.1%3Farch=el8eap
26
url pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1%3Farch=el9eap
27
url pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jboss-threads@2.5.0-1.redhat_00001.1%3Farch=el8eap
28
url pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1?arch=el8eap
purl pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1%3Farch=el8eap
29
url pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1?arch=el9eap
purl pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-jcip-annotations@1.0.0-3.redhat_00009.1%3Farch=el9eap
30
url pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1%3Farch=el9eap
31
url pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-slf4j-jboss-logmanager@2.0.2-1.Final_redhat_00001.1%3Farch=el8eap
32
url pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1%3Farch=el9eap
33
url pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-undertow@2.3.20-2.SP4_redhat_00001.1%3Farch=el8eap
34
url pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1%3Farch=el8eap
35
url pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-undertow@2.3.23-1.SP3_redhat_00001.1%3Farch=el9eap
36
url pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1?arch=el9eap
purl pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1%3Farch=el9eap
37
url pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1?arch=el8eap
purl pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly@8.1.3-4.GA_redhat_00006.1%3Farch=el8eap
38
url pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1%3Farch=el9eap
39
url pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-clustering@5.0.12-1.Final_redhat_00001.1%3Farch=el8eap
40
url pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1%3Farch=el9eap
41
url pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-elytron@2.6.6-1.Final_redhat_00001.1%3Farch=el8eap
42
url pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1?arch=el8eap
purl pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1%3Farch=el8eap
43
url pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1?arch=el9eap
purl pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-huxp-ctsp-fqay
1
vulnerability VCID-kk1t-t63f-rqg2
2
vulnerability VCID-ns3p-22xg-q3bz
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly-javadocs@8.1.1-4.GA_redhat_00007.1%3Farch=el9eap
References
0
reference_url https://access.redhat.com/errata/RHSA-2026:0383
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:0383
1
reference_url https://access.redhat.com/errata/RHSA-2026:0384
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:0384
2
reference_url https://access.redhat.com/errata/RHSA-2026:0386
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:0386
3
reference_url https://access.redhat.com/errata/RHSA-2026:3889
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:3889
4
reference_url https://access.redhat.com/errata/RHSA-2026:3890
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:3890
5
reference_url https://access.redhat.com/errata/RHSA-2026:3891
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:3891
6
reference_url https://access.redhat.com/errata/RHSA-2026:3892
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:3892
7
reference_url https://access.redhat.com/errata/RHSA-2026:4915
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:4915
8
reference_url https://access.redhat.com/errata/RHSA-2026:4916
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:4916
9
reference_url https://access.redhat.com/errata/RHSA-2026:4917
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:4917
10
reference_url https://access.redhat.com/errata/RHSA-2026:4924
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/errata/RHSA-2026:4924
11
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-12543.json
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-12543.json
12
reference_url https://access.redhat.com/security/cve/CVE-2025-12543
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://access.redhat.com/security/cve/CVE-2025-12543
13
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-12543
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14112
published_at 2026-04-02T12:55:00Z
1
value 0.00048
scoring_system epss
scoring_elements 0.14595
published_at 2026-04-16T12:55:00Z
2
value 0.00048
scoring_system epss
scoring_elements 0.14882
published_at 2026-04-04T12:55:00Z
3
value 0.00048
scoring_system epss
scoring_elements 0.14684
published_at 2026-04-07T12:55:00Z
4
value 0.00048
scoring_system epss
scoring_elements 0.14774
published_at 2026-04-08T12:55:00Z
5
value 0.00048
scoring_system epss
scoring_elements 0.14835
published_at 2026-04-09T12:55:00Z
6
value 0.00048
scoring_system epss
scoring_elements 0.14794
published_at 2026-04-11T12:55:00Z
7
value 0.00048
scoring_system epss
scoring_elements 0.14757
published_at 2026-04-12T12:55:00Z
8
value 0.00048
scoring_system epss
scoring_elements 0.14701
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-12543
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2408784
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-08T04:55:25Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=2408784
15
reference_url https://github.com/undertow-io/undertow
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/undertow-io/undertow
16
reference_url https://github.com/undertow-io/undertow/pull/1857
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/undertow-io/undertow/pull/1857
17
reference_url https://github.com/undertow-io/undertow/pull/1860
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/undertow-io/undertow/pull/1860
18
reference_url https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/undertow-io/undertow/releases/tag/2.2.39.Final
19
reference_url https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/undertow-io/undertow/releases/tag/2.3.21.Final
20
reference_url https://issues.redhat.com/browse/UNDERTOW-2656
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.redhat.com/browse/UNDERTOW-2656
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-12543
reference_id
reference_type
scores
0
value 9.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-12543
22
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125059
reference_id 1125059
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125059
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:apache_camel_hawtio:4
reference_id cpe:/a:redhat:apache_camel_hawtio:4
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:apache_camel_hawtio:4
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:apache_camel_spring_boot:4.14
reference_id cpe:/a:redhat:apache_camel_spring_boot:4.14
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:apache_camel_spring_boot:4.14
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_data_grid:8
reference_id cpe:/a:redhat:jboss_data_grid:8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_data_grid:8
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jbosseapxp
reference_id cpe:/a:redhat:jbosseapxp
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jbosseapxp
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:7.4
reference_id cpe:/a:redhat:jboss_enterprise_application_platform:7.4
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:7.4
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
reference_id cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
reference_id cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8
reference_id cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9
reference_id cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
reference_id cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
reference_id cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9
reference_id cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_bpms_platform:7
reference_id cpe:/a:redhat:jboss_enterprise_bpms_platform:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_enterprise_bpms_platform:7
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_fuse:7
reference_id cpe:/a:redhat:jboss_fuse:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:jboss_fuse:7
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:red_hat_single_sign_on:7
reference_id cpe:/a:redhat:red_hat_single_sign_on:7
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:red_hat_single_sign_on:7
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10
reference_id cpe:/o:redhat:enterprise_linux:10
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:10
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
reference_id cpe:/o:redhat:enterprise_linux:8
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:8
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9
reference_id cpe:/o:redhat:enterprise_linux:9
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/o:redhat:enterprise_linux:9
41
reference_url https://github.com/advisories/GHSA-j382-5jj3-vw4j
reference_id GHSA-j382-5jj3-vw4j
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j382-5jj3-vw4j
42
reference_url https://usn.ubuntu.com/8144-1/
reference_id USN-8144-1
reference_type
scores
url https://usn.ubuntu.com/8144-1/
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kk1t-t63f-rqg2