Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-fxa5-np4k-2ud9
Vulnerability ID VCID-fxa5-np4k-2ud9
Aliases CVE-2020-35510
GHSA-p6j8-hgv5-m35g
Summary Uncontrolled Resource Consumption A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-400 Uncontrolled Resource Consumption
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 5.9 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35510.json
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
epss 0.00564 https://api.first.org/data/v1/epss?cve=CVE-2020-35510
cvssv3.1 7.5 https://bugzilla.redhat.com/show_bug.cgi?id=1905796
generic_textual HIGH https://bugzilla.redhat.com/show_bug.cgi?id=1905796
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-p6j8-hgv5-m35g
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2020-35510
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-35510
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35510.json
https://api.first.org/data/v1/epss?cve=CVE-2020-35510
https://bugzilla.redhat.com/show_bug.cgi?id=1905796
CVE-2020-35510 https://nvd.nist.gov/vuln/detail/CVE-2020-35510
GHSA-p6j8-hgv5-m35g https://github.com/advisories/GHSA-p6j8-hgv5-m35g
RHSA-2021:0872 https://access.redhat.com/errata/RHSA-2021:0872
RHSA-2021:0873 https://access.redhat.com/errata/RHSA-2021:0873
RHSA-2021:0874 https://access.redhat.com/errata/RHSA-2021:0874
RHSA-2021:0885 https://access.redhat.com/errata/RHSA-2021:0885
RHSA-2021:0974 https://access.redhat.com/errata/RHSA-2021:0974
RHSA-2021:2210 https://access.redhat.com/errata/RHSA-2021:2210
RHSA-2021:5134 https://access.redhat.com/errata/RHSA-2021:5134
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35510.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://bugzilla.redhat.com/show_bug.cgi?id=1905796
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2020-35510
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.68351
EPSS Score 0.00564
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:49:43.410816+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jboss.remoting/jboss-remoting/CVE-2020-35510.yml 38.0.0