CVE-2025-12543 - Vulnerability Details

Related Threat Clusters

• Critical Undertow Vulnerability Exposes User Sessions in Multiple Ubuntu Releases

  A security vulnerability has been identified in the Undertow Java web server affecting multiple Ubuntu releases, including 24.04 LTS, 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. The flaw arises from improper…

  2 articles · Updated April 2, 2026
• HPE Telco Service Activator Vulnerability Allows Access Control Bypass

  A vulnerability in HPE Telco Service Activator, reported on February 19, 2026, allows attackers to bypass access restrictions. The flaw is linked to improper input validation in the Undertow HTTP server core used by the…

  4 articles · Updated February 23, 2026
• Critical Undertow HTTP Server Vulnerability Enables Session Hijacking in Java Apps

  A critical vulnerability, tracked as CVE-2025-12543, has been identified in the Undertow HTTP server, affecting Java applications like WildFly and JBoss EAP. This flaw allows attackers to hijack user sessions, leading…

  2 articles · Updated January 9, 2026

Recent Intelligence Reports

• Ubuntu 8144 — Linuxsecurity · April 2, 2026
• HPE Security Alert Shows How Backend Bugs Can Break CX — Cxtoday · February 23, 2026
• Undertow HTTP Server Vulnerability Allows Attackers to Hijack Sessions in Java Apps — Cyberpress · January 9, 2026
• Undertow HTTP Server Used in Java Apps Vulnerability Allow Attackers to Hijack Sessions — Cybersecuritynews · January 9, 2026

Related Entities