Redhat Jboss Enterprise Application Platform Continuous Delivery vulnerabilities

3 vulnerabilities

Known vulnerabilities in Redhat Jboss Enterprise Application Platform Continuous Delivery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2020-1732red hatsoteria+4
EPSS score
0.66%
A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly Elytron which can lead to the possibility of being handled using the identity from another request.6.5CVE-2020-14307red hatwildfly+5
EPSS score
1.20%
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.6.5CVE-2020-14297org.jbossjboss-ejb-client+7
EPSS score
1.20%
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.