CVE-2025-12799: Jastow: jastow cross-site scripting attack due to unsanitized uri

Awaiting analysis

AliasesRHSA-2026:36342RHSA-2026:36343RHSA-2026:36344

Published 07-07-2026Last modified 29-07-2026

Vulnerability summary

CVE-2025-12799 is a medium (CVSS 6.5) vulnerability in eap8 Red Hat. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 35.1% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.41%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

07-07-2026
PublishedVulnerability first disclosed.
29-07-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedded Undertow and Jastow, a server might be vulnerable to improper input handling.

CVSS metrics

3 scores · 3 sources · 1 version

v3.16.5

EPSS trend

Probability

0.41%

Chance of exploitation in the next 30 days

Percentile

35%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.41% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-79Improper Neutralization of Input During Web Page GenerationThe product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat200 products

eap8< 0:1-9.el10eap
eap8-activemq-artemis< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-cli< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-commons< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-core-client< 0:2.40.0-7.redhat_00015.1.el10eap

eap8-activemq-artemis-dto< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-hornetq-protocol< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-hqclient-protocol< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-jakarta-client< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-jakarta-ra< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-jakarta-server< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-jakarta-service-extensions< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-jdbc-store< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-journal< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-native< 1:2.0.0-2.redhat_00005.1.el10eap
eap8-activemq-artemis-selector< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-activemq-artemis-server< 0:2.40.0-7.redhat_00015.1.el10eap
eap8-aesh-extensions< 0:1.8.0-2.redhat_00001.1.el10eap
eap8-aesh-readline< 0:2.4.0-1.redhat_00002.1.el10eap
eap8-agroal< 0:2.3.0-1.redhat_00001.1.el10eap
eap8-agroal-api< 0:2.3.0-1.redhat_00001.1.el10eap
eap8-agroal-narayana< 0:2.3.0-1.redhat_00001.1.el10eap
eap8-agroal-pool< 0:2.3.0-1.redhat_00001.1.el10eap
eap8-angus< 0:2.0.5-1.redhat_00001.1.el10eap
eap8-angus-activation< 0:2.0.3-1.redhat_00001.1.el10eap
eap8-angus-mail< 0:2.0.5-1.redhat_00001.1.el10eap
eap8-antlr4< 0:4.13.2-1.redhat_00001.1.el10eap
eap8-antlr4-runtime< 0:4.13.2-1.redhat_00001.1.el10eap
eap8-apache-commons-beanutils< 0:1.11.0-1.redhat_00001.1.el10eap
eap8-apache-commons-cli< 0:1.9.0-1.redhat_00001.1.el10eap
eap8-apache-commons-codec< 0:1.17.2-1.redhat_00001.1.el10eap
eap8-apache-commons-collections< 0:3.2.2-28.redhat_2.1.el10eap
eap8-apache-commons-io< 0:2.16.1-2.redhat_00002.1.el10eap
eap8-apache-commons-lang< 0:3.18.0-2.redhat_00003.1.el10eap
eap8-apache-cxf< 0:4.0.10-3.redhat_00001.1.el8eap | < 0:4.0.10-3.redhat_00001.1.el9eap | < 0:4.0.10-3.redhat_00001.1.el10eap
eap8-apache-cxf-rt< 0:4.0.10-3.redhat_00001.1.el8eap | < 0:4.0.10-3.redhat_00001.1.el9eap | < 0:4.0.10-3.redhat_00001.1.el10eap
eap8-apache-cxf-services< 0:4.0.10-3.redhat_00001.1.el8eap | < 0:4.0.10-3.redhat_00001.1.el9eap | < 0:4.0.10-3.redhat_00001.1.el10eap
eap8-apache-cxf-tools< 0:4.0.10-3.redhat_00001.1.el8eap | < 0:4.0.10-3.redhat_00001.1.el9eap | < 0:4.0.10-3.redhat_00001.1.el10eap
eap8-apache-cxf-xjc-utils< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-apache-mime4j< 0:0.8.12-1.redhat_00001.1.el10eap
eap8-apache-mime4j-dom< 0:0.8.12-1.redhat_00001.1.el10eap
eap8-apache-mime4j-storage< 0:0.8.12-1.redhat_00001.1.el10eap
eap8-apache-sshd< 0:2.14.0-4.redhat_00003.1.el10eap
eap8-artemis-native< 1:2.0.0-2.redhat_00005.1.el10eap
eap8-artemis-native-wildfly< 1:2.0.0-2.redhat_00005.1.el10eap
eap8-artemis-wildfly-integration< 0:2.0.4-1.Final_redhat_00001.1.el8eap | < 0:2.0.4-1.Final_redhat_00001.1.el9eap | < 0:2.0.4-1.Final_redhat_00001.1.el10eap
eap8-asyncutil< 0:0.1.0-2.redhat_00010.1.el10eap
eap8-atinject< 0:2.0.1-5.redhat_00007.1.el10eap
eap8-aws-java-sdk< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-annotations< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-apache-client< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-arns< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-auth< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-aws-core< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-aws-query-protocol< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-aws-xml-protocol< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-checksums< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-checksums-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-crt-core< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-endpoints-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-http-auth< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-http-auth-aws< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-http-auth-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-http-client-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-identity-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-json-utils< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-metrics-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-profiles< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-protocol-core< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-regions< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-retries< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-retries-spi< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-s3< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-sdk-core< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-third-party-jackson-core< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-aws-java-sdk-utils< 0:2.30.32-3.redhat_00003.1.el10eap
eap8-azure-storage< 0:8.6.6-5.redhat_00001.1.el10eap
eap8-bouncycastle< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-jmail< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-pg< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-pkix< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-prov< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-bouncycastle-util< 0:1.84.0-1.redhat_00001.1.el10eap
eap8-byte-buddy< 0:1.14.18-2.redhat_00001.1.el10eap
eap8-caffeine< 0:3.1.8-2.redhat_00002.1.el10eap
eap8-codemodel< 0:4.0.6-1.redhat_00001.1.el10eap
eap8-commons-logging-jboss-logging< 0:1.0.0-2.Final_redhat_1.1.el10eap
eap8-cryptacular< 0:1.2.5-2.redhat_00001.1.el10eap
eap8-cxf-xjc-boolean< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-cxf-xjc-bug986< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-cxf-xjc-dv< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-cxf-xjc-runtime< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-cxf-xjc-ts< 0:4.1.0-1.redhat_00001.1.el10eap
eap8-eap-product-conf-parent< 0:801.7.0-1.GA_redhat_00001.1.el8eap | < 0:801.7.0-1.GA_redhat_00001.1.el9eap | < 0:801.7.0-1.GA_redhat_00001.1.el10eap
eap8-eap-product-conf-wildfly-ee-feature-pack< 0:801.7.0-1.GA_redhat_00001.1.el8eap | < 0:801.7.0-1.GA_redhat_00001.1.el9eap | < 0:801.7.0-1.GA_redhat_00001.1.el10eap
eap8-ecj< 1:3.33.0-1.redhat_00001.1.el10eap
eap8-eclipse-jgit< 0:6.10.1.202505221210-1.r_redhat_00002.1.el10eap
eap8-elasticsearch< 0:8.15.4-4.redhat_00003.1.el10eap
eap8-elasticsearch-rest-client< 0:8.15.4-4.redhat_00003.1.el10eap
eap8-elasticsearch-rest-client-sniffer< 0:8.15.4-4.redhat_00003.1.el10eap
eap8-elytron-web< 0:4.1.2-1.Final_redhat_00001.1.el10eap
eap8-eventstream< 0:1.0.1-3.redhat_00003.1.el10eap
eap8-expressly< 0:5.0.0-6.redhat_00001.1.el10eap
eap8-fastinfoset< 0:2.1.1-1.redhat_00001.1.el10eap
eap8-fge-btf< 0:1.2.0-4.redhat_00007.1.el10eap
eap8-fge-msg-simple< 0:1.1.0-4.redhat_00007.1.el10eap
eap8-gnu-getopt< 0:1.0.13-4.redhat_5.1.el10eap
eap8-gson< 0:2.10.1-2.redhat_00005.1.el10eap
eap8-guava< 0:33.0.0-3.jre_redhat_00004.1.el10eap
eap8-guava-failureaccess< 0:1.0.3-1.redhat_00001.1.el10eap
eap8-guava-libraries< 0:33.0.0-3.jre_redhat_00004.1.el10eap
eap8-h2database< 0:2.2.224-4.redhat_00003.1.el10eap
eap8-hal-console< 0:3.7.19-1.Final_redhat_00001.1.el10eap
eap8-hibernate< 0:6.6.50-1.Final_redhat_00001.1.el8eap | < 0:6.6.50-1.Final_redhat_00001.1.el9eap | < 0:6.6.50-1.Final_redhat_00001.1.el10eap
eap8-hibernate-commons-annotations< 0:7.0.3-3.Final_redhat_00002.1.el10eap
eap8-hibernate-core< 0:6.6.50-1.Final_redhat_00001.1.el8eap | < 0:6.6.50-1.Final_redhat_00001.1.el9eap | < 0:6.6.50-1.Final_redhat_00001.1.el10eap
eap8-hibernate-envers< 0:6.6.50-1.Final_redhat_00001.1.el8eap | < 0:6.6.50-1.Final_redhat_00001.1.el9eap | < 0:6.6.50-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-backend-elasticsearch< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-backend-lucene< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-engine< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-mapper-orm< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-mapper-pojo-base< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-search-util-common< 0:7.2.6-1.Final_redhat_00001.1.el10eap
eap8-hibernate-validator< 0:8.0.2-1.Final_redhat_00001.1.el10eap
eap8-hibernate-validator-cdi< 0:8.0.2-1.Final_redhat_00001.1.el10eap
eap8-hornetq< 0:2.4.11-1.Final_redhat_00001.1.el10eap
eap8-hornetq-commons< 0:2.4.11-1.Final_redhat_00001.1.el10eap
eap8-hornetq-core-client< 0:2.4.11-1.Final_redhat_00001.1.el10eap
eap8-hornetq-jakarta-client< 0:2.4.11-1.Final_redhat_00001.1.el10eap
eap8-hppc< 0:0.10.0-2.redhat_00001.1.el10eap
eap8-httpcomponents-asyncclient< 0:4.1.5-4.redhat_00006.1.el10eap
eap8-httpcomponents-client< 0:4.5.14-5.redhat_00016.1.el10eap
eap8-httpcomponents-core< 0:4.4.16-6.redhat_00011.1.el10eap
eap8-infinispan< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cachestore-jdbc< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cachestore-jdbc-common< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cachestore-remote< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cdi-common< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cdi-embedded< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-cdi-remote< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-client-hotrod< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-clustered-counter< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-clustered-lock< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-commons< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-core< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-hibernate-cache-commons< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-hibernate-cache-spi< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-hibernate-cache-v62< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-objectfilter< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-query< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-query-core< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-query-dsl< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-infinispan-remote-query-client< 0:15.0.21-1.Final_redhat_00002.1.el10eap
eap8-insights-java-client< 0:1.1.3-2.redhat_00002.1.el10eap
eap8-installation-manager-api< 0:1.1.1-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-api< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-impl< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-common-spi< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-core-api< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-core-impl< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-deployers-common< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-jdbc< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-ironjacamar-validator< 0:3.0.18-1.Final_redhat_00001.1.el10eap
eap8-istack-commons-runtime< 0:4.1.2-2.redhat_00003.1.el10eap
eap8-istack-commons-tools< 0:4.1.2-2.redhat_00003.1.el10eap
eap8-jackson-annotations< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-core< 0:2.18.4-1.redhat_00002.1.el10eap
eap8-jackson-coreutils< 0:1.8.0-3.redhat_00002.1.el10eap
eap8-jackson-databind< 0:2.18.4-1.redhat_00002.1.el10eap
eap8-jackson-dataformat-yaml< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-dataformats-text< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-datatype-jdk8< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-datatype-jsr310< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-jaxrs-base< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-jaxrs-json-provider< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-jaxrs-providers< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-module-jakarta-xmlbind-annotations< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-modules-base< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jackson-modules-java8< 0:2.18.4-2.redhat_00002.1.el10eap
eap8-jakarta-activation< 0:2.1.4-1.redhat_00001.1.el10eap
eap8-jakarta-annotation-api< 0:2.1.1-5.redhat_00005.1.el10eap
eap8-jakarta-authentication< 0:3.1.4-2.Final_redhat_00001.1.el10eap
eap8-jakarta-authentication-api< 0:3.0.0-3.redhat_00001.1.el10eap
eap8-jakarta-authorization< 0:3.1.4-2.Final_redhat_00001.1.el10eap
eap8-jakarta-authorization-api< 0:2.1.0-3.redhat_00001.1.el10eap
eap8-jakarta-batch-api< 0:2.1.1-3.redhat_00003.1.el10eap
eap8-jakarta-client-resteasy< 0:3.1.4-2.Final_redhat_00001.1.el10eap
eap8-jakarta-client-webservices< 0:3.1.4-2.Final_redhat_00001.1.el10eap
eap8-jakarta-ejb-api< 0:4.0.1-2.redhat_00001.1.el10eap
eap8-jakarta-enterprise-cdi-api< 0:4.0.1-2.redhat_00001.1.el10eap
eap8-jakarta-enterprise-concurrent< 0:3.0.2-1.redhat_00001.1.el10eap
eap8-jakarta-enterprise-concurrent-api< 0:3.0.3-1.redhat_00001.1.el10eap
eap8-jakarta-enterprise-lang-model< 0:4.0.1-2.redhat_00001.1.el10eap
eap8-jakarta-interceptor-api< 0:2.1.0-5.redhat_00003.1.el10eap
eap8-jakarta-jms-api< 0:3.1.0-4.redhat_00003.1.el10eap
eap8-jakarta-json< 0:1.1.6-5.redhat_00003.1.el10eap
eap8-jakarta-json-api< 0:2.1.3-1.redhat_00002.1.el10eap
eap8-jakarta-mail< 0:2.1.3-3.redhat_00003.1.el10eap

Show all 200

1 vendor · 200 products · Showing 200 of 457

References

29 links

access.redhat.com/errata/RHSA-2026:36342Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:36343Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:36344Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:36345Vendor AdvisoryX Refsource REDHAT
access.redhat.com/security/cve/CVE-2025-12799VDB EntryX Refsource REDHATREPORT
bugzilla.redhat.com/show_bug.cgi?id=2413071Issue TrackingX Refsource REDHATREPORT
access.redhat.com/security/updates/classification/ARTICLE
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.1ARTICLE
docs.redhat.com/en/…ARTICLE
docs.redhat.com/en/…ARTICLE

Show all 29 references

access.redhat.com/articles/7141266ARTICLE
issues.redhat.com/browse/JBEAP-31549ARTICLE
issues.redhat.com/browse/JBEAP-32062ARTICLE
issues.redhat.com/browse/JBEAP-32488ARTICLE
issues.redhat.com/browse/JBEAP-32528ARTICLE
issues.redhat.com/browse/JBEAP-32838ARTICLE
issues.redhat.com/browse/JBEAP-32871ARTICLE
issues.redhat.com/browse/JBEAP-32962ARTICLE
issues.redhat.com/browse/JBEAP-32963ARTICLE
issues.redhat.com/browse/JBEAP-33022ARTICLE
issues.redhat.com/browse/JBEAP-33158ARTICLE
issues.redhat.com/browse/JBEAP-33551ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36342.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2025-12799Advisory
nvd.nist.gov/vuln/detail/CVE-2025-12799Advisory
issues.redhat.com/browse/JBEAP-32489ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36343.jsonAdvisory
issues.redhat.com/browse/JBEAP-32490ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36344.jsonAdvisory