Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-6zc1-mdqf-nqbd
Vulnerability ID VCID-6zc1-mdqf-nqbd
Aliases CVE-2019-14887
Summary wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use
Status Published
Exploitability 0.5
Weighted Severity 8.2
Risk 4.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
System Score Found at
cvssv3 7.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14887.json
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
epss 0.00231 https://api.first.org/data/v1/epss?cve=CVE-2019-14887
cvssv2 6.4 https://nvd.nist.gov/vuln/detail/CVE-2019-14887
cvssv3 7.4 https://nvd.nist.gov/vuln/detail/CVE-2019-14887
cvssv3.1 9.1 https://nvd.nist.gov/vuln/detail/CVE-2019-14887
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14887.json
https://api.first.org/data/v1/epss?cve=CVE-2019-14887
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14887
https://issues.redhat.com/browse/JBEAP-17965
https://security.netapp.com/advisory/ntap-20200327-0007/
1772008 https://bugzilla.redhat.com/show_bug.cgi?id=1772008
cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:7.2.0:general_availability:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:wildfly:7.2.0:general_availability:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:7.2.3:general_availability:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:wildfly:7.2.3:general_availability:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:7.2.5:cr2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:wildfly:7.2.5:cr2:*:*:*:*:*:*
CVE-2019-14887 https://nvd.nist.gov/vuln/detail/CVE-2019-14887
RHSA-2020:0951 https://access.redhat.com/errata/RHSA-2020:0951
RHSA-2020:0961 https://access.redhat.com/errata/RHSA-2020:0961
RHSA-2020:0962 https://access.redhat.com/errata/RHSA-2020:0962
RHSA-2020:2067 https://access.redhat.com/errata/RHSA-2020:2067
RHSA-2020:2333 https://access.redhat.com/errata/RHSA-2020:2333
RHSA-2020:2511 https://access.redhat.com/errata/RHSA-2020:2511
RHSA-2020:2512 https://access.redhat.com/errata/RHSA-2020:2512
RHSA-2020:2513 https://access.redhat.com/errata/RHSA-2020:2513
RHSA-2020:2515 https://access.redhat.com/errata/RHSA-2020:2515
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14887.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-14887
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-14887
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2019-14887
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.45838
EPSS Score 0.00231
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T14:09:56.942998+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-14887.json 38.0.0