WE
Product
Wildfly Elytron
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Wildfly Elytron to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10714 | 7.5 | Sep 23 | A flaw was found in WildFly Elytron version 1.11.3.Final and before Affected: before 1.11.3 |
| CVE-2020-1748 | 7.5 | Sep 16 | A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security… Affected: before 1.6.8.final-redhat-00001 |
| CVE-2022-3143 | 7.4 | Jan 13 | wildfly-elytron: possible timing attacks via use of unsafe comparator Affected: 1.15.15 |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: before 1.10.14; 1.11.0 before 1.15.5; 1.16.0 before 1.16.1 |
Showing 4