Search for packages
| purl | pkg:maven/org.wildfly/wildfly-parent@18.0.0.Final |
| Next non-vulnerable version | 23.0.2.Final |
| Latest non-vulnerable version | 23.0.2.Final |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3u5h-h5pt-aaaq
Aliases: CVE-2021-3503 GHSA-c4r5-xvgw-2942 |
Metrics exposure in Wildfly |
Affected by 1 other vulnerability. |
|
VCID-bsgf-8zzj-aaas
Aliases: CVE-2020-10740 GHSA-vrmw-2xhq-hrmp |
A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly. |
Affected by 4 other vulnerabilities. |
|
VCID-rbn8-azsn-aaae
Aliases: CVE-2020-25640 GHSA-jw3v-5ch2-wfmm |
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file. |
Affected by 3 other vulnerabilities. |
|
VCID-v8th-h1mg-aaae
Aliases: CVE-2021-3536 GHSA-v2wx-jj66-2hp7 |
Cross-site Scripting in Wildfly |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-fsus-typ4-aaam | A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable. |
CVE-2020-14297
GHSA-qcch-9268-59jw |