Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jboss EAP Improper Resource Shutdown or Release Vulnerability - CVE-2025-9784 - Vulnerability Database
Jboss EAP

Jboss EAP Improper Resource Shutdown or Release Vulnerability - CVE-2025-9784

High
Reference: CVE-2025-9784
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-9784
Title: Jboss EAP Improper Resource Shutdown or Release Vulnerability
Overview:

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue referred to as the quotMadeYouResetquot attack allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).