Vulnerabilities CVE-2025-2251

CVE-2025-2251

Medium

Open

TLP:CLEAR

Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.

Details

CVSS Score: 6.2
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
Confidence: 90%
Published: Apr 7, 2025
Last Modified: Aug 19, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.