Red Hat Wildfly vulnerabilities

• red hat wildfly, redhat amq, amq online +5 more +7 more WildFly vulnerable to Insecure Default Initialization of Resource CVE-2022-1278 Fix available 7.5 HighSeptember 13, 2022
• red hat wildfly-core, redhat wildfly, descision manager +2 more wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault CVE-2021-3644 Fix available 3.3 LowAugust 26, 2022
• red hat wildfly, redhat jboss enterprise application platform, single sign-on +1 more +3 more Wildfly-Core user account mismanagement CVE-2021-3717 Fix available 7.8 HighMay 24, 2022
• red hat wildfly, redhat jboss enterprise application platform, openstack platform +2 more This is a concurrency issue that can result in the wrong caller principal being returned from the... CVE-2022-0866 Fix available 5.3 MediumMay 10, 2022
• red hat wildfly Metrics exposure in Wildfly CVE-2021-3503 Fix available 4.3 MediumApril 18, 2022
• red hat wildfly Privilege Context Switching Error in wildlfy CVE-2020-1719 Fix available 5.4 MediumJune 7, 2021
• redhat jboss enterprise application platform, red hat wildfly +1 more It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version... CVE-2020-14317 5.5 MediumJune 2, 2021
• red hat wildfly, redhat build of quarkus, data grid +6 more +8 more Cross-site Scripting in Wildfly CVE-2021-3536 Fix available 4.8 MediumMay 20, 2021
• red hat wildfly, redhat jboss-ejb-client, jboss enterprise application platform expansion pack +2 more JBoss EJB Client information disclosure vulnerability CVE-2021-20250 Fix available 4.3 MediumMay 13, 2021
• red hat wildfly Wildfly has a memory leak vulnerability CVE-2020-27822 Fix available 5.9 MediumDecember 8, 2020
• red hat wildfly Wildfly logs plaintext passwords CVE-2020-25640 Fix available 5.3 MediumNovember 24, 2020
• redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 more Uncontrolled Resource Consumption in WildFly CVE-2020-25689 Fix available 5.3 MediumOctober 30, 2020
• red hat wildfly, redhat xerces +1 more Improper Input Validation in Xerces CVE-2020-14338 Fix available 5.3 MediumSeptember 17, 2020
• red hat wildfly, redhat jboss fuse +1 more A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed... CVE-2020-10718 Fix available 7.5 HighSeptember 16, 2020
• red hat wildfly, redhat wildfly elytron, decision manager +1 more +3 more Incorrect Authorization in WildFly Elytron CVE-2020-1748 Fix available 7.5 HighSeptember 16, 2020
• red hat wildfly, redhat amq, jboss-ejb-client +4 more +6 more Wildfly EJB Client causes DoS CVE-2020-14297 Fix available 6.5 MediumJuly 24, 2020
• red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 more A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat... CVE-2020-14307 6.5 MediumJuly 24, 2020
• [unknown] wildfly Wildfly Unsafe Deserialization Vulnerability CVE-2020-10740 Fix available 6.6 MediumJune 22, 2020
• red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 more Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• red hat wildfly-security-manager, redhat jboss enterprise application platform, single sign-on +2 more A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests... CVE-2019-14843 Fix available 7.5 HighJanuary 7, 2020
• red hat wildfly-core, redhat data grid, jboss enterprise application platform +2 more +4 more Wildfly Authorization Misconfiguration CVE-2019-14838 Fix available 5.2 MediumOctober 14, 2019
• red hat wildfly, redhat jboss enterprise application platform +1 more It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from... CVE-2019-3894 5.4 MediumMay 3, 2019
• red hat wildfly, redhat jboss enterprise application platform +1 more A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are... CVE-2019-3805 5.5 MediumMay 3, 2019
• red hat wildfly-core, redhat jboss enterprise application platform, single sign-on +2 more A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions... CVE-2018-10934 5.4 MediumMarch 27, 2019
• [unknown] wildfly, redhat jboss enterprise application platform +1 more It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... CVE-2017-2595 7.7 HighJuly 27, 2018
• red hat wildfly, redhat jboss wildfly application server +1 more Red Hat Wildfly DoS CVE-2016-9589 Fix available 7.5 HighMarch 12, 2018
• red hat wildfly, redhat jboss enterprise application platform, jboss wildfly application server +2 more Improper Input Validation in org.wildfly:wildfly-undertow CVE-2018-1047 Public exploitFix available 5.5 MediumJanuary 24, 2018