WI
Product
Wildfly
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 11Low 1
Watch
Add Wildfly to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23367 | 6.5 | Jan 30 | A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider Affected: before 27.0.1; 28.0.0 |
| CVE-2020-25689 | 6.5 | Nov 2 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly… Affected: through 21.0.0 |
| CVE-2020-27822 | 5.9 | Dec 8 | A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final Affected: 19.0.0; 19.1.0; 20.0.0; 20.0.1; 21.0.0 |
| CVE-2018-14627 | 5.9 | Sep 4 | The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required Affected: before 14.0.0 |
| CVE-2020-14317 | 5.5 | Jun 2 | It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing… Affected: All versions, or not specified |
| CVE-2020-1719 | 5.4 | Jun 7 | A flaw was found in wildfly Affected: before 20.0.0 |
| CVE-2022-0866 | 5.3 | May 10 | This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal Affected: 11.0.0 before 26.1.1; 27.0.0 |
| CVE-2020-25640 | 5.3 | Nov 24 | A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in… Affected: before 21.0.0 |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: before 23.0.2 |
| CVE-2019-3805 | 4.7 | May 3 | A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system Affected: through 16.0.0 |
| CVE-2021-3503 | 4.3 | Apr 18 | A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data Affected: before 23.0.1 |
Showing 11