Red Hat Wildfly Core vulnerabilities

3 vulnerabilities

Known vulnerabilities in Red Hat Wildfly Core, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2018-10934red hatwildfly-core+2
EPSS score
0.95%
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.6.8CVE-2020-25689org.wildflywildfly-dist+11
EPSS score
1.49%
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.5.2CVE-2019-14838org.wildfly.corewildfly-host-controller+10
EPSS score
1.14%
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server