References https://access.redhat.com/security/cve/cve-2025-2251 https://nvd.nist.gov/vuln/detail/cve-2025-2251 https://access.redhat.com/articles/7114682 https://www.cve.org/CVERecord?id=CVE-2025-2251 https://bugzilla.redhat.com/show_bug.cgi?id=2351678 https://github.com/cisagov/vulnrichment/blob/develop/2025/2xxx/CVE-2025-2251.json https://avd.aquasec.com/nvd/2025/cve-2025-2251/ https://vulners.com/cve/CVE-2025-2251 https://cve.imfht.com/detail/CVE-2025-2251 https://avd.aliyun.com/detail?id=AVD-2025-2251
Related VulnerabilitiesPoCCVE-2017-7504: JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java DeserializationPoCCVE-2015-7501: Red Hat JBoss - Insecure DeserializationPoCjboss-jmx-console-unauth: JBoss JMX Console - Unauthenticated AccessJBOSS Netty SMTP 未授权 命令注入漏洞PoCCVE-2010-1429: Red Hat JBoss Enterprise Application Platform - Sensitive Information DisclosurePoCCVE-2017-12149: Jboss Application Server - Remote Code ExecutionPoCCVE-2010-1871: JBoss CVE-2010-1871PoCCVE-2017-12149: Java/Jboss Deserialization [RCE]PoCCVE-2017-7504: JBoss 4.x JBossMQ JMS 反序列化漏洞PoCjmx-default-password: JBoss JMX Console Weak CredentialPoCjboss-xml-console-unauthorized: JBoss JMX Console Weak Credential DiscoveryPoCjboss-jbpm-default-login: JBoss jBPM Administration Console Default Login - Detect