WI
Product
Wildfly
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 11Low 1
Watch
Add Wildfly to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3894 | 8.8 | May 3 | It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as Affected: 11.0.0 through 16.0.0 |
| CVE-2022-1278 | 7.5 | Sep 13 | A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain Affected: before 27.0.0 |
| CVE-2020-10718 | 7.5 | Sep 16 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL) Affected: before 13.0.0 |
| CVE-2020-10740 | 7.5 | Jun 22 | A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of… Affected: before 20.0.0 |
Showing 4