Red Hat wildfly vulnerabilities

5 published CVEs name Red Hat wildfly among the affected products.

Critical 0High 1Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2020-14297
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the…
Red Hat · wildfly
Medium6.5
CVE-2020-14307
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed…
Red Hat · wildfly
Medium6.5
CVE-2019-14887
A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker…
Red Hat · wildfly
High7.4
CVE-2019-3894
It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These…
Red Hat · wildfly
Medium5.4
CVE-2019-3805
A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary…
Red Hat · wildfly
Medium5.5