Medium severity · published Apr 7, 2025
CVE-2025-2251
Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution
6.2
CVSS
1.1%
EPSS
No
On KEV
Description
A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Red Hat
All versions, or not specified · source: vendor
Affected product
RH
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Red Hat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2251
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2251
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10452
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10453
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10459
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10924
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10925
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:10926
More from Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
7.5
CVE-2023-1973
Undertow: unrestricted request storage leads to memory exhaustion
7.5
CVE-2024-7885
Undertow: improper state management in proxy protocol parsing causes information leakage
7.5
CVE-2024-5971
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
7.5
CVE-2024-1635
Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol
7.4
CVE-2023-4639
Undertow: cookie smuggling/spoofing