Redhat Wildfly vulnerabilities

• red hat build of keycloak, data grid 8, fuse 7 +13 more +15 more Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli CVE-2025-23368 Fix available 8.1 HighMarch 4, 2025
• redhat wildfly, red hat build of keycloak, data grid 8 +14 more +16 more Org.wildfly.core:wildfly-server: wildfly improper rbac permission CVE-2025-23367 Fix available 6.5 MediumJanuary 30, 2025
• red hat jboss enterprise application platform, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 more Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor CVE-2023-4061 Fix available 6.5 MediumNovember 8, 2023
• redhat.com wildfly-elytron, redhat jboss enterprise application platform, wildfly elytron +2 more Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator CVE-2022-3143 Fix available 7.4 HighJanuary 11, 2023
• red hat wildfly, redhat amq, amq online +5 more +7 more WildFly vulnerable to Insecure Default Initialization of Resource CVE-2022-1278 Fix available 7.5 HighSeptember 13, 2022
• red hat wildfly-core, redhat wildfly, descision manager +2 more wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault CVE-2021-3644 Fix available 3.3 LowAugust 26, 2022
• red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 more Undertow Uncontrolled Resource Consumption CVE-2021-3629 Fix available 5.9 MediumMay 24, 2022
• red hat wildfly, redhat jboss enterprise application platform, single sign-on +1 more +3 more Wildfly-Core user account mismanagement CVE-2021-3717 Fix available 7.8 HighMay 24, 2022
• red hat wildfly, redhat jboss enterprise application platform, openstack platform +2 more This is a concurrency issue that can result in the wrong caller principal being returned from the... CVE-2022-0866 Fix available 5.3 MediumMay 10, 2022
• red hat wildfly Metrics exposure in Wildfly CVE-2021-3503 Fix available 4.3 MediumApril 18, 2022
• redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 more Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• red hat wildfly Privilege Context Switching Error in wildlfy CVE-2020-1719 Fix available 5.4 MediumJune 7, 2021
• redhat jboss enterprise application platform, red hat wildfly +1 more It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version... CVE-2020-14317 5.5 MediumJune 2, 2021
• red hat wildfly, redhat build of quarkus, data grid +6 more +8 more Cross-site Scripting in Wildfly CVE-2021-3536 Fix available 4.8 MediumMay 20, 2021
• red hat wildfly Wildfly has a memory leak vulnerability CVE-2020-27822 Fix available 5.9 MediumDecember 8, 2020
• red hat wildfly Wildfly logs plaintext passwords CVE-2020-25640 Fix available 5.3 MediumNovember 24, 2020
• redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 more Uncontrolled Resource Consumption in WildFly CVE-2020-25689 Fix available 5.3 MediumOctober 30, 2020
• redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 more Wildfly-OpenSSL memory leak flaw CVE-2020-25644 Fix available 7.5 HighOctober 6, 2020
• redhat wildfly elytron, netapp oncommand insight, redhat codeready studio +4 more +6 more Session Fixation in WildFly Elytron CVE-2020-10714 Fix available 7.5 HighSeptember 23, 2020
• red hat wildfly, redhat jboss fuse +1 more A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed... CVE-2020-10718 Fix available 7.5 HighSeptember 16, 2020
• red hat wildfly, redhat wildfly elytron, decision manager +1 more +3 more Incorrect Authorization in WildFly Elytron CVE-2020-1748 Fix available 7.5 HighSeptember 16, 2020
• [unknown] wildfly Wildfly Unsafe Deserialization Vulnerability CVE-2020-10740 Fix available 6.6 MediumJune 22, 2020
• red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 more Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• red hat wildfly-core, redhat data grid, jboss enterprise application platform +2 more +4 more Wildfly Authorization Misconfiguration CVE-2019-14838 Fix available 5.2 MediumOctober 14, 2019
• red hat wildfly, redhat jboss enterprise application platform +1 more It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from... CVE-2019-3894 5.4 MediumMay 3, 2019
• red hat wildfly, redhat jboss enterprise application platform +1 more A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are... CVE-2019-3805 5.5 MediumMay 3, 2019
• redhat wildfly, [unknown] jboss/wildfly +1 more The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when... CVE-2018-14627 Fix available 5.3 MediumSeptember 4, 2018
• redhat wildfly core, jboss enterprise application platform, virtualization +2 more Improper Limitation of a Pathname to a Restricted Directory in WildFly CVE-2018-10862 Fix available 5.5 MediumJuly 27, 2018
• redhat wildfly ** DISPUTED ** An issue was discovered in WildFly 10.1.2.Final. In the case of a default... CVE-2018-10683 Disputed 9.8 CriticalMay 9, 2018
• red hat wildfly, redhat jboss wildfly application server +1 more Red Hat Wildfly DoS CVE-2016-9589 Fix available 7.5 HighMarch 12, 2018
• red hat wildfly, redhat jboss enterprise application platform, jboss wildfly application server +2 more Improper Input Validation in org.wildfly:wildfly-undertow CVE-2018-1047 Public exploitFix available 5.5 MediumJanuary 24, 2018
• redhat jboss wildfly application server The Undertow module of WildFly allows source code disclosure CVE-2015-3198 Fix available 7.5 HighJuly 21, 2017
• redhat jboss enterprise application platform, jboss wildfly application server +1 more Improper Neutralization of CRLF Sequences in Wildfly Undertow CVE-2016-4993 Fix available 6.1 MediumSeptember 26, 2016
• redhat jboss wildfly application server WildFly has incomplete blacklist vulnerability CVE-2016-0793 Public exploitFix available EPSS 15.0% 7.5 HighApril 1, 2016
• redhat jboss enterprise application platform, jboss wildfly application server +1 more The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ... CVE-2015-5220 5.0 MediumOctober 27, 2015
• redhat jboss enterprise application platform, jboss wildfly application server +1 more Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat... CVE-2015-5188 6.8 MediumOctober 27, 2015
• redhat jboss enterprise application platform, jboss wildfly application server +1 more The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ... CVE-2015-5178 4.3 MediumOctober 27, 2015
• redhat jboss enterprise application platform, jboss wildfly application server +1 more Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server,... CVE-2014-0018 1.9 LowFebruary 14, 2014