Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jboss EAP Improper Input Validation Vulnerability - CVE-2025-12543 - Vulnerability Database
Jboss EAP

Jboss EAP Improper Input Validation Vulnerability - CVE-2025-12543

Critical
Reference: CVE-2025-12543
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-12543
Title: Jboss EAP Improper Input Validation Vulnerability
Overview:

A flaw was found in the Undertow HTTP server core which is used in WildFly JBoss EAP and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result requests containing malformed or malicious Host headers are processed without rejection enabling attackers to poison caches perform internal network scans or hijack user sessions.