{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/undertow-io/undertow/","packageName":"undertow","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"2.2.38.Final","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat build of Apache Camel 4.14.2 for Spring Boot 3.5.8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.4.18-21.SP19_redhat_00001.1.ep7.el7","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.41-8.SP9_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"io.undertow/undertow-core","product":"Red Hat JBoss Enterprise Application Platform 7.4.24","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2.2.39.Final-redhat-00001","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.39-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.24-4.GA_redhat_00002.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat JBoss Enterprise Application Platform 8.0","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.83.0-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-guava-libraries","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:33.0.0-2.jre_redhat_00003.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jaxb","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.6-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jcip-annotations","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.0-3.redhat_00009.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-slf4j-jboss-logmanager","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.2-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.23-1.SP3_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.83.0-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-guava-libraries","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:33.0.0-2.jre_redhat_00003.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jaxb","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.6-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jcip-annotations","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.0-3.redhat_00009.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-slf4j-jboss-logmanager","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.2-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.23-1.SP3_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"io.undertow/undertow-core","product":"Red Hat JBoss Enterprise Application Platform 8.1.3","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"2.3.20.SP4-redhat-00001","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-apache-cxf","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.10-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.82.0-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:801.3.0-1.GA_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eventstream","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.1-3.redhat_00003.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-hibernate","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.6.36-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jboss-el-api_5.0_spec","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.2-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jboss-threads","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.5.0-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.20-2.SP4_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.1.3-4.GA_redhat_00006.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-clustering","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.0.12-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.6.6-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-javadocs","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.1.1-4.GA_redhat_00007.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-apache-cxf","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.10-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.82.0-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:801.3.0-1.GA_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eventstream","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.1-3.redhat_00003.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-hibernate","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.6.36-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jboss-el-api_5.0_spec","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.2-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jboss-threads","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.5.0-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.20-2.SP4_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.1.3-4.GA_redhat_00006.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-clustering","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.0.12-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.6.6-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-javadocs","product":"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.1.1-4.GA_redhat_00007.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat Single Sign-On 7.6.13","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","product":"Red Hat Single Sign-On 7.6 for RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:18.0.20-1.redhat_00001.1.el7sso","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","product":"Red Hat Single Sign-On 7.6 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:18.0.20-1.redhat_00001.1.el8sso","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"rh-sso7-keycloak","product":"Red Hat Single Sign-On 7.6 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:18.0.20-1.redhat_00001.1.el9sso","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://catalog.redhat.com/software/containers/","packageName":"rh-sso-7/sso76-openshift-rhel8","product":"RHEL-8 based Middleware Containers","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.6-85","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat build of Apache Camel - HawtIO 4","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat Data Grid 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"moditect","product":"Red Hat Enterprise Linux 10","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pki-core:10.6/resteasy","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"pki-deps:10.6/resteasy","product":"Red Hat Enterprise Linux 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"resteasy","product":"Red Hat Enterprise Linux 9","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat Fuse 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"undertow-core","product":"Red Hat JBoss Enterprise Application Platform 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"org.jberet-jberet-parent","product":"Red Hat JBoss Enterprise Application Platform 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"org.jboss.eap-jboss-eap-xp","product":"Red Hat JBoss Enterprise Application Platform 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"org.jboss.eap-jboss-eap-xp","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"undertow-core","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow-core","product":"Red Hat Process Automation 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:build_of_apache_camel_for_spring_boot:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:fuse:7.0.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:8.0.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:undertow:-:*:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2025-9784","cwes":["CWE-770","CWE-404"],"description":"A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the \"MadeYouReset\" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).","epss":{"date":"2026-11-04","percentile":0.83543,"score":0.02325},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":7.5,"severity":"high","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793830660723,"publishedAt":1756820279772,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:23143"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:0383"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:0384"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:0386"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33371"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:33372"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:3889"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:3891"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:3892"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4915"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4916"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4917"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4924"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:76128"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:76129"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:76130"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:76132"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:76134"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2025-9784"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/undertow-io/undertow/pull/1778"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final"},{"source":"CNA: redhat","tags":[],"url":"https://issues.redhat.com/browse/UNDERTOW-2598"},{"source":"CNA: redhat","tags":[],"url":"https://kb.cert.org/vuls/id/767506"},{"source":"ADP: CVE","tags":[],"url":"https://www.kb.cert.org/vuls/id/767506"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2025:23143"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:0383"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:0384"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:0386"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:33371"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:33372"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:3889"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:3891"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:3892"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:4915"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:4916"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:4917"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:4924"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:76128"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:76129"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:76130"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:76132"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2026:76134"},{"source":"secalert@redhat.com","tags":["Vendor Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2025-9784"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392306"},{"source":"secalert@redhat.com","tags":[],"url":"https://github.com/undertow-io/undertow/pull/1778"},{"source":"secalert@redhat.com","tags":[],"url":"https://github.com/undertow-io/undertow/releases/tag/2.2.38.Final"},{"source":"secalert@redhat.com","tags":[],"url":"https://issues.redhat.com/browse/UNDERTOW-2598"},{"source":"secalert@redhat.com","tags":[],"url":"https://kb.cert.org/vuls/id/767506"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"https://www.kb.cert.org/vuls/id/767506"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability."}],"revision":"aa865a884f80ea179bfd81ddd41d498dc4cbbbc041d34dce73fa6afebc66c13a","sources":[{"modifiedAt":1793828783817,"name":"CNA: redhat","retrievedAt":1793830251865,"url":"https://www.cve.org/CVERecord?id=CVE-2025-9784"},{"modifiedAt":1793830660723,"name":"NVD","retrievedAt":1793837804009,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9784"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793830294078,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-9784"}],"ssvc":{"assessedAt":1756821322694,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Undertow: undertow madeyoureset http/2 ddos vulnerability","updatedAt":1793837804009}