CVE-2025-12799
6.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
Summary
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1-9.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.40.0-7.redhat_00015.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 1:2.0.0-2.redhat_00005.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.8.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.0-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.5-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.3-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.13.2-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.11.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.9.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.17.2-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.2.2-28.redhat_2.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.16.1-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.18.0-2.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.10-3.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:0.8.12-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.14.0-4.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 1:2.0.0-2.redhat_00005.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.4-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:0.1.0-2.redhat_00010.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-5.redhat_00007.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.30.32-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.6.6-5.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.84.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.14.18-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.8-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.0-2.Final_redhat_1.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.2.5-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:801.7.0-1.GA_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 1:3.33.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:6.10.1.202505221210-1.r_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.15.4-4.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.1-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.0-6.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.1-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.2.0-4.redhat_00007.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.0-4.redhat_00007.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.13-4.redhat_5.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.10.1-2.redhat_00005.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.3-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:33.0.0-3.jre_redhat_00004.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.2.224-4.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.7.19-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:6.6.50-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:7.0.3-3.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:7.2.6-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.0.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.11-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:0.10.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.5-4.redhat_00006.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.5.14-5.redhat_00016.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.4.16-6.redhat_00011.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:15.0.21-1.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.3-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.18-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.8.0-3.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.18.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.4-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.1-5.redhat_00005.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.0-3.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-3.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.1-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.1-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.2-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.3-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.1-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-5.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.0-4.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.6-5.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.3-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.3-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:6.0.0-6.redhat_00007.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.1-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.2-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-3.redhat_00004.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.2-3.redhat_00006.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.1-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.0-5.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.4-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.2.7-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.1-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.9.3-4.redhat_00004.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.6.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.0-4.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.3-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.2.3-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:6.0.0-8.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.6-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.3-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.3.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.7.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.8-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.0-3.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.6.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.19-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.2.3-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:16.1.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.6-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.5.5-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:10.1.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.31-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.0-3.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.5.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.3.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.0-4.SP3_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.1.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:7.3.8-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.8.16-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.0-3.redhat_00009.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.6-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 1:5.3.23-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.2-1.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.12.7-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:0.9.6-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.11-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.1-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.9.0-3.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.1-1.Final_redhat_3.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.23.1-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:9.11.1-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:7.1.2-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.2.1-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.132-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.132-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:0.1.10-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:9.37.3-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:9.7.1-3.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.3.2-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.7-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.4.0-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.6.1-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.0.3-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.14-2.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.4-4.redhat_00005.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.12-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.2.21-5.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.2.0-2.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:6.2.15-1.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-3.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.2.0-3.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.4-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.0.0-6.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.17-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.2-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.2.2-2.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.0-3.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.5.0-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:4.1.2-2.redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.24-4.SP3_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.2.9-1.SP1_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.1.6-3.redhat_1.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-7.redhat_00010.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.1.6-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.1.7-4.GA_redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.0.1-4.Final_redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:5.0.12-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.7.0-2.Final_redhat_00003.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.3.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.6.9-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.1.4-2.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.1.4-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:8.1.1-11.GA_redhat_00019.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.0.1-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-1.Final.redhat.00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.5-1.Final_redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:7.0.0-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:2.3.0-2.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.6.3-5.redhat_00008.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.4-1.redhat_00002.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:1.2.0-2.redhat_12.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.5-1.redhat_00001.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | 0:3.0.4-5.redhat_00007.1.el10eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:4.0.10-3.redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:2.0.4-1.Final_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:801.7.0-1.GA_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:6.6.50-1.Final_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:7.3.8-1.Final_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 1:5.3.23-1.Final_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:2.3.24-4.SP3_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:2.2.9-1.SP1_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:8.1.7-4.GA_redhat_00003.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:2.6.9-1.Final_redhat_00001.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | 0:8.1.1-11.GA_redhat_00019.1.el8eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:4.0.10-3.redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:2.0.4-1.Final_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:801.7.0-1.GA_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:6.6.50-1.Final_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:7.3.8-1.Final_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 1:5.3.23-1.Final_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:2.3.24-4.SP3_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:2.2.9-1.SP1_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:8.1.7-4.GA_redhat_00003.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:2.6.9-1.Final_redhat_00001.1.el9eap < * | unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | 0:8.1.1-11.GA_redhat_00019.1.el9eap < * | unaffected |
Weaknesses
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Workarounds
It is possible to contruct successful attack vector if and only if customer or client is using embedded Undertow and Jastow together in their application and the following conditions are met:
- Undertow was configured with UndertowOptions.ALLOW_UNESCAPED_CHARACTERS_IN_URL set to 'true' value
- DeploymentInfo configured with setEscapeErrorMessage(true) method was passed to Undertow's Servlet Container instance
References
- https://access.redhat.com/errata/RHSA-2026:36342
- https://access.redhat.com/errata/RHSA-2026:36343
- https://access.redhat.com/errata/RHSA-2026:36344
- https://access.redhat.com/errata/RHSA-2026:36345
- https://access.redhat.com/security/cve/CVE-2025-12799
- https://bugzilla.redhat.com/show_bug.cgi?id=2413071
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.