Red Hat Red Hat JBoss Enterprise Application Platform 8.0

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-12543Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrfCRITICAL 9.61.3 %
CVE-2024-3884Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedHIGH 7.51.4 %
CVE-2025-9784Undertow: undertow madeyoureset http/2 ddos vulnerabilityHIGH 7.52.3 %