Get real-time updates on Telegram

CVE-2025-12543

CVE-2025-12543. CVSS base score 9.6 (CRITICAL, NVD). EPSS 0.01333 (percentile 0.7014), scored 2026-10-04.

Published 2026-10-06 00:26:06.138223+00:00

CWE

CWE-20

CCR priority

38.7 /100 (P4)

CVSS

9.6 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H · NVD

EPSS

0.01333 · percentile 0.7014 · 2026-10-04

KEV

no

Affected products

• cpe:2.3:a:redhat:build_of_apache_camel:*:*:*:*:*:spring_boot:*:*
• cpe:2.3:a:redhat:data_grid:8.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:fuse:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
• cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:jboss_enterprise_application_platform_expansion_pack:-:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
• cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*

Provenance

• NVD CVE API 2.0 · Source record · observed 2026-10-06 00:26:03.168174+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-12543.html