6.2

CVE-2025-2251

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://www.wildfly.org/
≫
Package wildfly
Default Statusunaffected
Version < 36.0.0
Version 0
Status affected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4.23
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.16.0-21.redhat_00055.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:3.5.10-1.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 1:1.0.2-5.redhat_00004.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:1.9.6-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.3.14-9.SP10_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:3.3.27-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:6.0.23-3.SP2_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:1.5.21-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:1.10.0-42.Final_redhat_00042.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:5.4.15-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:7.4.23-3.GA_redhat_00002.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Default Statusaffected
Version < *
Version 0:1.15.26-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.16.0-21.redhat_00055.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:3.5.10-1.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 1:1.0.2-5.redhat_00004.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:1.9.6-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.3.14-9.SP10_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:3.3.27-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:6.0.23-3.SP2_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:1.5.21-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:1.10.0-42.Final_redhat_00042.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:5.4.15-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:7.4.23-3.GA_redhat_00002.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
Default Statusaffected
Version < *
Version 0:1.15.26-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:2.16.0-21.redhat_00055.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:3.5.10-1.redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 1:1.0.2-5.redhat_00004.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:1.9.6-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:2.3.14-9.SP10_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:3.3.27-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:6.0.23-3.SP2_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:1.5.21-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:1.10.0-42.Final_redhat_00042.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:5.4.15-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:7.4.23-3.GA_redhat_00002.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Default Statusaffected
Version < *
Version 0:1.15.26-1.Final_redhat_00001.1.el7eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0.8
Default Statusunaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.33.0-3.redhat_00017.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:1.11.0-1.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:4.0.6-2.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:0.8.12-1.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:800.8.0-1.GA_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:4.0.3-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.1.1-1.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:3.6.24-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:6.2.36-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:4.1.5-4.redhat_00006.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:5.0.31-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:7.3.3-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:6.0.6-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:3.2.1-1.redhat_00002.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.2.21-3.redhat_00002.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.0.17-1.redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.3.0-4.redhat_00010.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:8.0.8-4.GA_redhat_00006.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Default Statusaffected
Version < *
Version 0:2.2.11-1.Final_redhat_00001.1.el8eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.33.0-3.redhat_00017.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:1.11.0-1.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:4.0.6-2.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:0.8.12-1.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:800.8.0-1.GA_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:4.0.3-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.1.1-1.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:3.6.24-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:6.2.36-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:4.1.5-4.redhat_00006.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:5.0.31-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:7.3.3-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:6.0.6-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:3.2.1-1.redhat_00002.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.2.21-3.redhat_00002.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.0.17-1.redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.3.0-4.redhat_00010.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:8.0.8-4.GA_redhat_00006.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Default Statusaffected
Version < *
Version 0:2.2.11-1.Final_redhat_00001.1.el9eap
Status unaffected
VendorRed Hat
≫
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Default Statusunaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.03% 0.831
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secalert@redhat.com 6.2 0.7 5.5
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.