CVE-2025-9784

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.5EPSS 2%

Published 2025-09-02Updated 2025-09-02

Vulnerability details

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNAredhat

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

CVE Organization NVD Analysis RedHat Vuln DB

Profile

CVSS

7.5

EPSS

Published

2025-09-02

Updated

2025-09-02

CNA

redhat

Vendors

No vendors listed.

CPEs

cpe:/a:redhat:apache_camel_spring_boot:4.14

cpe:/a:redhat:jboss_enterprise_application_platform:7.4

cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7

cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8

cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9

cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8

cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9

cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8

cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9

cpe:/a:redhat:apache_camel_hawtio:4

cpe:/a:redhat:jboss_data_grid:8

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:jboss_fuse:7

cpe:/a:redhat:jboss_enterprise_application_platform:8

cpe:/a:redhat:jbosseapxp

cpe:/a:redhat:jboss_enterprise_bpms_platform:7

cpe:/a:redhat:red_hat_single_sign_on:7

cpe:/a:redhat:jboss_enterprise_application_platform:7

cpe:/o:redhat:rhivos:1

cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7

cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7

cpe:/a:redhat:red_hat_single_sign_on:7.6

cpe:/a:redhat:rhosemc:1.0::el8

cpe:/a:redhat:red_hat_single_sign_on:7.6::el8

cpe:/a:redhat:red_hat_single_sign_on:7.6::el9

cpe:/a:redhat:red_hat_single_sign_on:7.6::el7

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated