CVE-2025-2251
CVSS 3.1 Score 6.2 of 10 (medium)
Details
Published Apr 7, 2025
CWE ID 502
Summary
CVE-2025-2251 is a critical vulnerability affecting WildFly and JBoss Enterprise Application Platform (EAP). The issue lies in the Enterprise JavaBeans (EJB) remote invocation mechanism and results from untrusted data deserialization using JBoss Marshalling. An attacker can exploit this flaw by sending a maliciously crafted serialized object, thereby gaining the ability to execute arbitrary code on the targeted system, bypassing the authentication requirement.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.