HPESBNW05033 rev.1 - HPE Telco Network Function Virtual Orchestrator, Improper Input Validation in the Undertow HTTP Server Core

🗓️ 31 Mar 2026 00:00:00Reported by hpeType

HPE Telco Orchestrator has improper input validation in Undertow, risking unauthorized access.

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by two Undertow vulnerabilities that could allow remote denial of service attacks and Host header manipulation leading to cache poisoning or session hijacking	23 Feb 202619:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Undertow	24 Mar 202619:29	–	ibm
IBM Security Bulletins	Security Bulletin: Improper Host Header Validation in Undertow HTTP Server Enables Cache Poisoning and Session Hijacking affects watsonx.data	9 Apr 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Undertow server core	10 Apr 202614:17	–	ibm
ATTACKERKB	CVE-2025-12543	7 Jan 202616:04	–	attackerkb
BDU FSTEC	The vulnerability of the Undertow HTTP server’s kernel allows for attacks using SSRF, due to errors in the mechanism for processing input data when handling Host headers.	9 Jan 202600:00	–	bdu_fstec
Broadcom	Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf (CVE-2025-12543)	26 Jan 202600:00	–	broadcom
Chainguard	CVE-2025-12543 vulnerabilities	27 Jan 202601:17	–	cgr
Circl	CVE-2025-12543	7 Jan 202616:56	–	circl
CNNVD	Red Hat Undertow 安全漏洞	7 Jan 202600:00	–	cnnvd