CVE-2020-1710

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...

5.3 Medium

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

1.19%Up 0.8 points since Apr 14, 2021

What each source reports

NVD Score used 5.3

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Record: CVE-2020-1710
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Record: CVE-2020-1710
Updated: 2026-11-02

EUVDEUVD-2020-12565 No score

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Record: EUVD-2020-12565
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xqwp-g97m-cxpr 5.3

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.

Record: GHSA-xqwp-g97m-cxpr
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:3461 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update

Record: RHSA-2020:3461
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3462 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update

Record: RHSA-2020:3462
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 5 moreShow less

OSVRHSA-2020:3463 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.2 security update

Record: RHSA-2020:3463
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3637 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 6 security update

Record: RHSA-2020:3637
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3638 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 7 security update

Record: RHSA-2020:3638
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2020:3639 8.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.9 on RHEL 8 security update

Record: RHSA-2020:3639
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:5856 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.7 on RHEL 7 security update

Record: RHSA-2024:5856
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`eap7-dom4j` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:2.1.3-1.redhat_00001.1.el6eap	0:2.1.3-1.redhat_00001.1.el6eap
`eap7-elytron-web` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:1.6.2-1.Final_redhat_00001.1.el6eap	0:1.6.2-1.Final_redhat_00001.1.el6eap
`eap7-glassfish-jsf` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:2.3.9-11.SP11_redhat_00001.1.el6eap	0:2.3.9-11.SP11_redhat_00001.1.el6eap
`eap7-hal-console` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:3.2.9-1.Final_redhat_00001.1.el6eap	0:3.2.9-1.Final_redhat_00001.1.el6eap
`eap7-hibernate` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:5.3.17-1.Final_redhat_00001.1.el6eap	0:5.3.17-1.Final_redhat_00001.1.el6eap
`eap7-hibernate-core` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:5.3.17-1.Final_redhat_00001.1.el6eap	0:5.3.17-1.Final_redhat_00001.1.el6eap
`eap7-hibernate-entitymanager` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:5.3.17-1.Final_redhat_00001.1.el6eap	0:5.3.17-1.Final_redhat_00001.1.el6eap
`eap7-hibernate-envers` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:5.3.17-1.Final_redhat_00001.1.el6eap	0:5.3.17-1.Final_redhat_00001.1.el6eap
`eap7-hibernate-java8` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:5.3.17-1.Final_redhat_00001.1.el6eap	0:5.3.17-1.Final_redhat_00001.1.el6eap
`eap7-hibernate-validator` Red Hat:jboss_enterprise_application_platform:7.3::el6 From an advisory covering 14 CVEs	before 0:6.0.20-1.Final_redhat_00001.1.el6eap	0:6.0.20-1.Final_redhat_00001.1.el6eap

Show 290 moreShow less

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases, products	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-1710 is a medium vulnerability (CVSS 5.3) in Red Hat, Inc. Jboss Enterprise Application Platform, published September 16, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 229 package rows and 50 references. The JSON record has them.