Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 7/wildfly-server
Red Hat
· Package
4 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
WildFly improper RBAC permission
CVE-2025-23367 · GHSA-QR6X-62GQ-4CCP
org.wildfly.core:wildfly-server
Red Hat Data Grid 8/wildfly-server
Maven
Red Hat
Medium
Fix reported
2025-12-08
org.wildfly.core/wildfly-server: wildfly: RBAC bypass in WildFly deployment-operation handlers leads to privilege escalation
CVE-2026-12977
Red Hat JBoss Enterprise Application Platform 7/wildfly-server
Red Hat Single Sign-On 7/wildfly-server
Red Hat
High
No fix reported
Not recorded
org.wildfly.core: WildFly: Path traversal in take-snapshot discloses the server configuration to the Monitor role
CVE-2026-84823
Red Hat Fuse 7/wildfly-cli
Red Hat Fuse 7/wildfly-controller-client
Red Hat
Low
No fix reported
Not recorded
wildfly-core: wildfly-core: Deployer RBAC role privilege escalation via path traversal in deployment name
CVE-2026-85634
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
