Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-vxgb-dd12-hyba
Vulnerability ID VCID-vxgb-dd12-hyba
Aliases CVE-2018-14627
Summary The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>
Status Published
Exploitability 0.5
Weighted Severity 4.8
Risk 2.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-319 Cleartext Transmission of Sensitive Information
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
epss 0.00227 https://api.first.org/data/v1/epss?cve=CVE-2018-14627
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
https://api.first.org/data/v1/epss?cve=CVE-2018-14627
https://github.com/wildfly/wildfly/commit/883115ea2168343e870745f538a80b1ddc360914
1624664 https://bugzilla.redhat.com/show_bug.cgi?id=1624664
RHSA-2018:3527 https://access.redhat.com/errata/RHSA-2018:3527
RHSA-2018:3528 https://access.redhat.com/errata/RHSA-2018:3528
RHSA-2018:3529 https://access.redhat.com/errata/RHSA-2018:3529
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.45428
EPSS Score 0.00227
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:38:17.459089+00:00 ProjectKB MSRImporter Import https://raw.githubusercontent.com/SAP/project-kb/master/MSR2019/dataset/vulas_db_msr2019_release.csv 38.0.0