Unknown Wildfly vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Wildfly, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2020-10740org.wildflywildfly-parent+2
EPSS score
2.07%
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.7.7CVE-2017-2595redhatjboss_enterprise_application_platform+1
EPSS score
3.06%
It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.