Every CVE Search/ Get API key

CVE-2020-14384

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935...

7.5 HighFix available

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.36%Up 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-14384
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-400
Updated
2026-11-02
CVE List No score

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Record
CVE-2020-14384
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2020-6524 No score

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Record
EUVD-2020-6524
Updated
2026-11-03
GitHub AdvisoriesGHSA-8793-frgg-7jvv No score

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935...

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Record
GHSA-8793-frgg-7jvv
Updated
2026-11-02
OSVRHSA-2020:3730 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4 security update

Record
RHSA-2020:3730
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:5459 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.24 security update

Record
RHSA-2022:5459
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:5460 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.24 security update

Record
RHSA-2022:5460
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.5.31-3.Final_redhat_3.1.ep6.el5
0:7.5.31-3.Final_redhat_3.1.ep6.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.31-3.Final_redhat_3.1.ep6.el6
0:7.5.31-3.Final_redhat_3.1.ep6.el6
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.31-3.Final_redhat_3.1.ep6.el7
0:7.5.31-3.Final_redhat_3.1.ep6.el7
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
Show 123 moreShow less
Affected packages
PackageAffectedFixed
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-1.Final_redhat_00001.1.ep6.el6
0:7.5.24-1.Final_redhat_00001.1.ep6.el6
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el6
0:7.5.24-2.Final_redhat_00001.1.ep6.el6
jbossts
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 1:4.17.45-2.Final_redhat_2.1.ep6.el6
1:4.17.45-2.Final_redhat_2.1.ep6.el6
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
From an advisory covering 6 CVEs
 before 0:7.5.32-2.Final_redhat_1.2.ep6.el6
0:7.5.32-2.Final_redhat_1.2.ep6.el6
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-1.Final_redhat_00001.1.ep6.el7
0:7.5.24-1.Final_redhat_00001.1.ep6.el7
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.24-2.Final_redhat_00001.1.ep6.el7
0:7.5.24-2.Final_redhat_00001.1.ep6.el7
jbossts
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 1:4.17.45-2.Final_redhat_2.1.ep6.el7
1:4.17.45-2.Final_redhat_2.1.ep6.el7
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el7
From an advisory covering 6 CVEs
 before 0:7.5.32-2.Final_redhat_1.2.ep6.el7
0:7.5.32-2.Final_redhat_1.2.ep6.el7

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-14384 is a high vulnerability (CVSS 7.5) in Redhat Jbossweb, published September 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 71st percentile. Fixed in jbossweb 0:7.5.31-3.Final_redhat_3.1.ep6.el5.

References

Show 45 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open