Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jboss-eap

CVE-2025-12799 is a Cross-Site Scripting (XSS) vulnerability in the Jastow component of Red Hat JBoss Enterprise Application Platform 8.1.7.GA. The flaw arises from improper neutralization of input during web page generation, specifically when unescaped characters are allowed in URLs combined with Undertow and Jastow configurations. This vulnerability could allow an attacker to inject malicious scripts via crafted URIs. Red Hat has released a security update in version 8.1.7 that addresses this issue by upgrading Jastow and related components.

The vulnerability CVE-2025-12799 affects Red Hat JBoss Enterprise Application Platform 8.1.7.GA through the Jastow component, which is vulnerable to Cross-Site Scripting (XSS) attacks due to improper input handling of unsanitized URIs. When certain combined configurations allow unescaped characters in URLs processed by Undertow and Jastow, an attacker could exploit this to inject malicious scripts. Red Hat's advisory confirms the issue and provides a security update that upgrades Jastow from version 2.2.9.Final-redhat-00001 to 2.2.9.SP1-redhat-00001, along with upgrades to other related components. The CVSS v3.1 base score is 6.5, indicating a medium severity level, with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity but not availability.

Detailed information about Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update affecting Red Hat Product Security Red

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:36345

https://access.redhat.com/security/updates/classification/#moderate

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/release_notes_for_red_hat_jboss_enterprise_application_platform_8.1/index

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1/html/red_hat_jboss_enterprise_application_platform_installation_methods/index

https://access.redhat.com/articles/7134190

2413071

JBEAP-31549

JBEAP-32062

JBEAP-32528

JBEAP-32838

JBEAP-32871

JBEAP-32962

JBEAP-32963

JBEAP-33022

JBEAP-33158

JBEAP-33551

Canonical URL

CVE-2025-12799: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GA

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.

The vulnerability CVE-2025-12799 affects Red Hat JBoss Enterprise Application Platform versions before 8.1.7. It is due to improper input handling in the Jastow component, specifically when certain configurations allow unescaped characters in URLs processed by Undertow and Jastow. This leads to a Cross-Site Scripting (XSS) vulnerability where malicious scripts can be injected and executed in the context of the affected server. The issue is fixed in version 8.1.7 by upgrading the Jastow component to 2.2.9.SP1-redhat-00001 and related dependencies. The CVSS v3.1 base score is 6.5 (medium severity) with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity.

Detailed information about CVE-2025-12799: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Red Hat Red Hat JBoss Enterpr

CVE-2025-12799: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Red Hat Red Hat JBoss Enterprise Application Platform 7 - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-12799: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GACVE-2025-12799 0 CVE-2025-12799 is a Cross-Site Scripting (XSS) vulnerability in the Jastow component of Red Hat JBoss Enterprise Application Platform 8.1.7.GA. The flaw arises from improper neutralization of input during web page generation, specifically when unescaped characters are allowed in URLs combined with Undertow and Jastow configurations. This vulnerability could allow an attacker to inject malicious scripts via crafted URIs. Red Hat has released a security update in version 8.1.7 that addresses this issue by upgrading Jastow and related components. MediumVulnerability#gcve #csaf #cve-2025-12799 Join the discussion	GCVE Database	07/07/2026, 16:18:57 UTC Added: 07/30/2026, 05:46:52 UTC
CVE-2025-12799: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Red Hat Red Hat JBoss Enterprise Application Platform 8.1.7.GACVE-2025-12799 0 A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling. MediumVulnerability#cve #cve-2025-12799 Join the discussion	CVE Database V5	07/07/2026, 16:18:57 UTC Added: 07/07/2026, 16:44:04 UTC

Threats Tagged 'cve-2025-12799'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12799'

Lead Pen Test Professional