CVE-2025-14969

{"id": "CVE-2025-14969", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2026-01-26T20:16:08.313", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:1965", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-14969", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423822", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-772"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Hibernate Reactive. Cuando un endpoint HTTP est\u00e1 expuesto para realizar operaciones de base de datos, un cliente remoto puede cerrar prematuramente la conexi\u00f3n HTTP. Esta acci\u00f3n puede provocar la fuga de conexiones del pool de conexiones de la base de datos, lo que podr\u00eda causar una denegaci\u00f3n de servicio (DoS) al agotar las conexiones de base de datos disponibles."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "secalert@redhat.com"}