Build Of Apache Camel
1 CVEs
product
Monthly
Undertow HTTP server (used in WildFly, JBoss EAP) fails to validate Host headers, enabling cache poisoning, internal network scanning, and session hijacking. Affects a widely-used Java application server component.
Java
Information Disclosure
Process Automation
Jboss Enterprise Application Platform Expansion Pack
Jboss Enterprise Application Platform
+6
NVD
VulDB
CVSS 3.1
9.6
EPSS
0.1%
CVE-2025-12543
EPSS 0%
CVSS 9.6
CRITICAL
PATCH
Act Now
Undertow HTTP server (used in WildFly, JBoss EAP) fails to validate Host headers, enabling cache poisoning, internal network scanning, and session hijacking. Affects a widely-used Java application server component.
Java
Information Disclosure
Process Automation
+8
NVD
VulDB