Skip to content
COOEY

EXPOSURES › CVE-2025-12543

CVE-2025-12543

CRITICAL
DETAIL
SourceNVD · cve Published2026-01-07 CVSS9.6 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-12543 ↗

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
redhat · vendorbuild of apache camel · productdata grid · productfuse · productjboss enterprise application platform · productjboss enterprise application platform expansion pack · productprocess automation · productsingle sign-on · productundertow · product
DESCRIPTION

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.