Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Undertow web server

Summary Due to use of the Undertow web server, DevOps Test Performance and Rational Performance Tester contain a potential Denial of Service DoS vulnerability. Vulnerability Details CVEID:CVE-2025-9784 DESCRIPTION: A flaw was found in Undertow where malformed client requests can trigger server-si...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.24 (RHSA-2026:4915)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4915 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.0.12 (RHSA-2026:3889)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:3889 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.12 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.3 (RHSA-2026:0383)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0383 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release o...

CVE-2025-9784 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-9784 vulnerabilities

Vulnerabilities for packages: wildfly...

HPESBNW04973 rev.1 - HPE Telco Service Activator, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator =10.3.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-48795 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | ...

Linux Distros Unpatched Vulnerability : CVE-2025-9784

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as...

de.svenkubiak:mangooio-mongodb-extension (2.0.1), io.mangoo:mangooio-benchmark (2.2.0) +26 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.12.final)

io.undertow:undertow-core MAVEN version 1.3.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.svenkubiak:mangooio-mongodb-extension 2.0.1 - io.mangoo:mangooio-benchmark 2.2.0 -...

com.groupon.mesos:jesos (>=1.0, <=1.4), com.hubspot:embedsingularityexample (>=0.4.1, <=0.4.4) +5 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.0.16.final)

io.undertow:undertow-core MAVEN version 1.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.groupon.mesos:jesos =1.0, =0.4.1, =0.4.1, =5.2.2, =1.2.2, =2.2.2 Source cves: CVE-2025-9784 Source...

com.fizzed:ninja-undertow (>=5.3.1.undertow1, <=5.3.1.undertow2), io.undertow:undertow-http2-test-suite (1.3.17.final) +4 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.3.17.final)

io.undertow:undertow-core MAVEN version 1.3.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.fizzed:ninja-undertow =5.3.1.undertow1, =1.1.7, =2.0.0-beta-2 -...

io.undertow:undertow-servlet (1.0.19.final), io.undertow:undertow-websockets-jsr (1.0.19.final) potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.0.19.final)

io.undertow:undertow-core MAVEN version 1.0.19.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.19.final - io.undertow:undertow-websockets-jsr 1.0.19.final Source...

com.github.zurekp:slb (0.0.5), fr.braindead:websocket-client (>=1.0.0, <=1.0.1) +25 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.2.0.beta8)

io.undertow:undertow-core MAVEN version 1.2.0.beta8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.zurekp:slb 0.0.5 - fr.braindead:websocket-client =1.0.0, =1.0.4, =0.4.0, =0.4.0, =0.4.0,...

com.networknt:audit (>=1.4.1, <=1.4.6), com.networknt:balance (>=1.4.1, <=1.4.6) +48 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.4.19.final)

io.undertow:undertow-core MAVEN version 1.4.19.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.networknt:audit =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1,...

io.undertow:undertow-servlet (1.0.0.cr1), io.undertow:undertow-websockets-jsr (1.0.0.cr1) potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.0.0.cr1)

io.undertow:undertow-core MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr1 - io.undertow:undertow-websockets-jsr 1.0.0.cr1 Source cves:...

io.undertow:undertow-http2-test-suite (1.2.0.beta5), io.undertow:undertow-servlet (1.2.0.beta5) +2 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.2.0.beta5)

io.undertow:undertow-core MAVEN version 1.2.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta5 - io.undertow:undertow-servlet 1.2.0.beta5 -...

ch.digitalfondue.stampo:stampo (1.0), ch.digitalfondue.stampo:stampo-maven-plugin (1.0) +37 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.2.4.final)

io.undertow:undertow-core MAVEN version 1.2.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - ch.digitalfondue.stampo:stampo 1.0 - ch.digitalfondue.stampo:stampo-maven-plugin 1.0 -...

com.github.avarabyeu.jashing.extensions:jashing-cvs (>=0.0.12, <=0.0.16), com.github.avarabyeu.jashing.extensions:jashing-git (>=0.0.12, <=0.0.16) +36 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.4.6.final)

io.undertow:undertow-core MAVEN version 1.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.avarabyeu.jashing.extensions:jashing-cvs =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.0.12, =0.4.3...

club.dawdler:dawdler-boot-web-undertow (>=0.0.1-jdk1.8-releases, <=0.1.6-jdk1.8-releases), club.dawdler:dawdler-boot-web-undertow-jsp (>=0.0.1-jdk1.8-releases, <=0.1.6-jdk1.8-releases) +53 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.4.28.final)

io.undertow:undertow-core MAVEN version 1.4.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - club.dawdler:dawdler-boot-web-undertow =0.0.1-jdk1.8-releases, =0.0.1-jdk1.8-releases,...