Search for packages
| purl | pkg:maven/org.wildfly/wildfly-parent@20.0.0.Final |
| Next non-vulnerable version | 23.0.2.Final |
| Latest non-vulnerable version | 23.0.2.Final |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3u5h-h5pt-aaaq
Aliases: CVE-2021-3503 GHSA-c4r5-xvgw-2942 |
Metrics exposure in Wildfly |
Affected by 1 other vulnerability. |
|
VCID-m89y-hqwv-aaar
Aliases: CVE-2020-27822 GHSA-qx3p-9mmp-4v8h |
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-rbn8-azsn-aaae
Aliases: CVE-2020-25640 GHSA-jw3v-5ch2-wfmm |
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file. |
Affected by 3 other vulnerabilities. |
|
VCID-v8th-h1mg-aaae
Aliases: CVE-2021-3536 GHSA-v2wx-jj66-2hp7 |
Cross-site Scripting in Wildfly |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bsgf-8zzj-aaas | A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly. |
CVE-2020-10740
GHSA-vrmw-2xhq-hrmp |