What is the CVSS score of CVE-2025-12799?

CVE-2025-12799 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2025-12799?

Yes, a patch is available for CVE-2025-12799. Update the affected software to the latest version immediately.

Jastow CVE-2025-12799

EUVD-2025-210439 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-07 redhat

GHSA-rfhw-2486-47r9

XSS Red Hat Jboss Enterprise Application Platform 8 Red Hat Jboss Enterprise Application Platform Expansion Pack Red Hat Single Sign On 7 Red Hat Jboss Enterprise Application Platform 7 Red Hat

6.5

CVSS 3.1 · Vendor: redhat

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Identify EAP instance with permissive URL config
Delivery

Craft URL embedding XSS payload
Exploit

Submit request through network
Execution

Jastow reflects unescaped payload in response
Persist

Victim browser executes injected script
Impact

Exfiltrate session token or perform action as victim

Vulnerability Assessment

Weakness	CWE CWE-79 OWASP Top 10:2025 A05:2025 - Injection ASVS 5.0 V1 - Encoding and Sanitization Output encoding, context-aware escaping MITRE ATT&CK 2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Exploitation requires a specific combination of two non-default configuration settings: Undertow must be configured to allow unescaped characters in URL processing, AND Jastow must be configured in a manner that does not re-encode those characters before including them in page output. Neither condition alone is sufficient - both must be present simultaneously. This means default-configured JBoss EAP deployments are not exploitable; only environments where operators have explicitly relaxed URL character handling in both the HTTP server layer and the JSP engine are at risk. Limiting factors include the AC:H prerequisite (non-default configuration conjunction), and - consistent with the CVSS PR:N metric - no authentication is required from the attacker's side. The victim's browser executing malicious script is the realized impact pathway, meaning a human user accessing the vulnerable endpoint is typically the final link in the impact chain (though the provided CVSS vector scores UI:N, which conflicts with typical XSS exploitation models - defenders should verify this with Red Hat).
Impact	The CVSS 3.1 base score of 6.5 with vector AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N presents several notable tensions that warrant scrutiny. AC:H correctly reflects the configuration-dependency requirement, which meaningfully reduces the exposed population. However, UI:N is atypical for XSS (CWE-79): classical reflected or stored XSS requires a victim to load a crafted response (UI:R), and a scope change (S:C) typically applies since script execution occurs in the victim's browser security context. The given I:H with S:U may imply Red Hat is modeling integrity impact at the server or session level, or this may represent a scoring interpretation divergence - defenders should verify with the vendor advisory at access.redhat.com. No EPSS data was provided, and the absence of KEV listing and public POC indicates this is not currently being mass-exploited. Real-world priority is reduced by the AC:H configuration prerequisite: only deployments that have explicitly combined non-default URL encoding settings across both Undertow and Jastow are exploitable. This is a meaningful but bounded risk - not a fire-drill-level priority for most JBoss EAP shops.
Exploit ScenarioDerived	An attacker identifies a JBoss EAP deployment where both Undertow URL character-escape handling and Jastow output encoding have been configured in a permissive non-default combination. The attacker crafts a URL containing embedded JavaScript payload characters that survive the URL processing pipeline unescaped and are reflected into the HTTP response rendered by a victim's browser, executing the script in the victim's session context and potentially exfiltrating session tokens or performing actions on behalf of the user. No public proof-of-concept code has been identified at time of analysis, so successful exploitation requires attacker knowledge of the specific configuration state.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jul 07, 2026

Cross-site scripting in Jastow - the JSP implementation layer embedded within Red Hat JBoss Enterprise Application Platform alongside Undertow - allows unauthenticated remote attackers to inject and execute malicious scripts when a specific combination of configurations permits unescaped characters to pass through URL processing. Affected deployments span JBoss EAP 7, EAP 8, the Expansion Pack, and linked products such as Red Hat Single Sign-On 7 that share this component. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.

RemediationAI

The primary remediation is to apply Red Hat's patch for JBoss EAP 7, EAP 8, and the Expansion Pack as referenced in the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-12799 - an exact fixed version number was not confirmed from the available data, so administrators should consult the advisory directly for the specific update. As a compensating control prior to patching, review and tighten Undertow and Jastow configuration to avoid the permissive combination that allows unescaped characters in URL handling: specifically, disable any non-default settings that relax URL character escaping in Undertow's request parsing or Jastow's output encoding pipeline. Enabling a web application firewall rule to block reflected script patterns in URL input can reduce exposure, though this carries the trade-off of potential false positives on legitimate parameterized URLs. Red Hat Single Sign-On 7 deployments should also be evaluated, as they share the affected runtime components.

Affected VersionsENISA

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:2.6.9-1.Final_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.0-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.1.5-4.redhat_00006.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.0-3.redhat_00009.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.0-3.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.3-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:0.10.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:9.37.3-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.13.2-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:7.0.3-3.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.8-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:0.1.10-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.5.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.7.19-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.2-1.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:6.6.50-1.Final_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.1.7-4.GA_redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.0-3.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.12.7-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.10.1-2.redhat_00005.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.1-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.15.4-4.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.7-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.0-4.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:6.10.1.202505221210-1.r_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.31-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.5-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.5.5-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-5.redhat_00007.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:0.1.0-2.redhat_00010.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:2.2.9-1.SP1_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:6.6.50-1.Final_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.4-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.0-3.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.1-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.4.16-6.redhat_00011.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.11.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.1-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.0.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.3-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.3-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:9.7.1-3.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.8-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.2.0-3.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.24-4.SP3_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.4-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.1-1.Final_redhat_3.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:2.6.9-1.Final_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.1.2-2.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.1-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.2.3-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.1-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.7.0-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.1.1-11.GA_redhat_00019.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:0.9.6-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.3-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.18-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:7.2.6-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.8.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.40.0-7.redhat_00015.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.8.0-3.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.4-4.redhat_00005.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.3-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.14.0-4.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.18.4-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.10-3.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.18.4-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.2-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.4-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.0.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.1-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.1.6-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:7.3.8-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.1-4.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.0-4.redhat_00007.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.2.0-4.redhat_00007.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.1-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.6.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.6-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.2.1-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.0-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.6-3.redhat_1.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.9.0-3.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:16.1.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:6.0.0-8.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.16.1-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.19-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.0-4.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.0-5.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:801.7.0-1.GA_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1-9.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:7.1.2-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.11-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.0-3.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.2.7-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-1.Final.redhat.00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.4-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.17.2-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:2.3.24-4.SP3_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.2.0-2.redhat_12.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.6.9-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.6-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:4.0.10-3.redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:8.1.7-4.GA_redhat_00003.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-3.redhat_00004.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.2.5-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.1.0-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.14.18-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.7.0-2.Final_redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:0.8.12-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.2.9-1.SP1_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:2.3.24-4.SP3_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.12-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.2.2-2.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.13-4.redhat_5.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.6-5.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:2.2.9-1.SP1_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 1:5.3.23-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.3.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.84.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.11-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.3-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.3-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:33.0.0-3.jre_redhat_00004.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.8.16-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.5-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.2.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.4-5.redhat_00007.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.5.14-5.redhat_00016.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-3.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:7.3.8-1.Final_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.0-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:15.0.21-1.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:8.1.1-11.GA_redhat_00019.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.1.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.23.1-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:9.11.1-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.6.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 1:5.3.23-1.Final_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:2.0.4-1.Final_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.3.1-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:10.1.1-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.3.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:8.1.7-4.GA_redhat_00003.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-7.redhat_00010.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.12-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:6.0.0-6.redhat_00007.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.2.2-28.redhat_2.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:4.0.10-3.redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.30.32-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.2.21-5.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:7.0.0-1.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.1-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:8.1.1-11.GA_redhat_00019.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 patch: 0:2.0.4-1.Final_redhat_00001.1.el8eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 1:2.0.0-2.redhat_00005.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.1.132-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:7.3.8-1.Final_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 1:3.33.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.0.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.3.2-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.4-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.1-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.3-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.0-4.SP3_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.17-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.5-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.1.2-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.6.1-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.0-6.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.1.4-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.6.6-5.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.0.4-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.1-5.redhat_00005.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.2.3-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.5.0-2.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:8.0.0-6.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.0-2.Final_redhat_1.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.2.224-4.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:801.7.0-1.GA_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:6.2.15-1.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:6.6.50-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.9.3-4.redhat_00004.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.2-3.redhat_00006.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:5.0.14-2.Final_redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.4.1-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.0.0-1.Final_redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.0-3.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.0.0-2.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:4.1.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 1:5.3.23-1.Final_redhat_00001.1.el9eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.3.0-2.redhat_00002.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:2.1.0-5.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:3.18.0-2.redhat_00003.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.9.0-1.redhat_00001.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 patch: 0:1.6.3-5.redhat_00008.1.el10eap

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 patch: 0:801.7.0-1.GA_redhat_00001.1.el9eap

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Jastow is the Undertow-native JSP processing engine (analogous to Apache Jasper for Tomcat) embedded in Red Hat JBoss EAP. Undertow is the non-blocking HTTP server underpinning JBoss EAP's Java EE runtime. CWE-79 (Improper Neutralization of Input During Web Page Generation) describes the root cause: user-supplied URL input is not properly escaped or sanitized before being reflected or rendered back in an HTTP response. The vulnerability is activated by a conjunction of configuration options - both Undertow and Jastow must be set in a way that permits unescaped characters in URL paths or parameters, suggesting the flaw lives at the interface between URL parsing and output encoding rather than in either component alone. CPE data identifies the affected surface as cpe:2.3:a:red_hat:red_hat_jboss_enterprise_application_platform_7 and cpe:2.3:a:red_hat:red_hat_jboss_enterprise_application_platform_8, as well as the Expansion Pack variant.

Know when Red Hat Jboss Enterprise Application Platform 8 gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (redhat) PRIMARY 6.5 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N

vuln.today AI 4.7 MEDIUM

XSS inherently requires victim interaction (UI:R) and browser scope change (S:C); AC:H retained for configuration-conjunction prerequisite; I:L more appropriate than I:H absent evidence of server-side integrity compromise.

3.1 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Red Hat 6.5 MEDIUM

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

None

DescriptionCVE.org

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.

Threat Intelligence Overview

EPSS Score

0.2%

Top 84% exploitable

Prevalence

Medium

widely-deployed in Java enterprise environments, not universal

Data Quality

7 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment Vendor

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation

None

System Exposure· derived

Open

Automatable

Human Impact· derived

Medium

Technical Impact

Partial

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +32

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Cross-Site Scripting MEDIUM

Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.

More in Red Hat Jboss Enterprise Application Platform 8

View all

CVE-2026-28369 CRITICAL Act Now

9.1 Mar 27

HTTP request smuggling in Undertow (the embedded web server underpinning JBoss EAP, Red Hat Data Grid, and Apache Camel

CVE-2026-28368 CRITICAL Act Now

9.1 Mar 27

HTTP request smuggling in Red Hat Undertow allows remote unauthenticated attackers to bypass front-end security controls

CVE-2026-28367 CRITICAL Act Now

9.1 Mar 27

HTTP request smuggling in Undertow allows remote unauthenticated attackers to send `\r\r\r` as a header block terminator

CVE-2026-86404 HIGH This Week

8.8 Sep 07

Unrestricted Java deserialization in Red Hat EAP's embedded Apache ActiveMQ Artemis broker allows authenticated JMS clie

CVE-2026-85634 HIGH This Week

8.8 Oct 15

Path traversal in wildfly-core's deployment content handler allows an authenticated JBoss EAP, WildFly, Fuse 7, or Singl

CVE-2026-93569 HIGH This Week

8.2 Sep 18

Mismatched handling of the HTTP/1 absolute-form request authority in Red Hat build of Quarkus and other affected Red Hat

CVE-2026-1609 HIGH This Week

8.1 Jul 16

Access-control bypass in Keycloak (fixed in 26.5.3) lets a disabled user account still obtain valid tokens through the J

CVE-2026-84725 HIGH This Week

8.1 Oct 28

Unauthenticated remote code execution is possible in Red Hat JBoss Enterprise Application Platform 7 and 8 when the serv

CVE-2026-89059 HIGH This Week

7.5 Sep 18

A remote, unauthenticated attacker can exhaust the JVM heap and cause a denial of service by sending a small crafted ima

CVE-2026-93558 HIGH This Week

7.5 Sep 18

Unbounded per-connection queue growth in Netty's WebSocketServerExtensionHandler lets unauthenticated remote attackers e

CVE-2026-93568 HIGH This Week

7.5 Sep 18

Improper handling of HTTP/2 and HTTP/3 Extended CONNECT requests in Netty-based services can downgrade them to ordinary

CVE-2026-93488 HIGH This Week

7.5 Sep 18

Unbounded remote-initiated stream creation in Netty's SpdySessionHandler allows an unauthenticated, network-positioned a

Same weakness CWE-79 – Cross-site Scripting (XSS)

View all

CVE-2020-3580 MEDIUM POC

6.1

CVE-2013-7389 MEDIUM POC

4.3

CVE-2021-25299 MEDIUM POC

6.1

CVE-2014-2120 MEDIUM

6.1

CVE-2023-40000 HIGH POC

8.3

CVE-2016-8581 MEDIUM POC

6.1

CVE-2013-5223 MEDIUM POC

5.4

CVE-2025-52367 MEDIUM POC

5.4

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

9.8

CVE-2013-1710 CRITICAL POC

10.0

CVE-2024-52875 HIGH POC

8.8

Vendor StatusVendor

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-12799 ADVISORY https://vuldb.com/vuln/376657 REF https://access.redhat.com/errata/RHSA-2026:36342 REF https://access.redhat.com/errata/RHSA-2026:36343 REF https://access.redhat.com/errata/RHSA-2026:36344 REF https://access.redhat.com/errata/RHSA-2026:36345 REF https://access.redhat.com/security/cve/CVE-2025-12799 REF https://bugzilla.redhat.com/show_bug.cgi?id=2413071

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back