All products

Red Hat JBoss Fuse 6/wildfly

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incorrect Authorization in WildFly ElytronCVE-2020-1748 · GHSA-QGRQ-CX4C-2RMM org.wildfly.security:wildfly-elytronRed Hat Fuse 7/wildfly MavenRed Hat High Fix reported
Wildfly-Core user account mismanagementCVE-2021-3717 · GHSA-P9XF-3RM3-QH2H org.wildfly.core:wildfly-core-parentRed Hat Data Grid 8/wildfly MavenRed Hat High Fix reported
Wildfly has a memory leak vulnerabilityCVE-2020-27822 · GHSA-QX3P-9MMP-4V8H org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Wildfly Unsafe Deserialization VulnerabilityCVE-2020-10740 · GHSA-VRMW-2XHQ-HRMP org.wildfly:wildfly-parentRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat High Fix reported
Wildfly logs plaintext passwordsCVE-2020-25640 · GHSA-JW3V-5CH2-WFMM org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Privilege Context Switching Error in wildlfyCVE-2020-1719 · GHSA-P9CF-QJXQ-VXW6 org.wildfly.bom:wildflyRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat Medium Fix reported
wildfly: Race condition on PID file allows for termination of arbitrary processes by local usersCVE-2019-3805 Red Hat JBoss Data Virtualization 6/jbossasRed Hat JBoss Enterprise Application Platform 6/jbossas Red Hat Medium No fix reported
Soteria: security identity corruption across concurrent threadsCVE-2020-1732 Red Hat JBoss Data Virtualization 6/jbossasRed Hat JBoss Data Virtualization 6/wildfly Red Hat Low No fix reported
wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in useCVE-2019-14887 Red Hat JBoss Data Grid 7/wildflyRed Hat JBoss Data Virtualization 6/jbossas Red Hat Medium No fix reported
wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabledCVE-2022-0866 Red Hat Decision Manager 7/wildflyRed Hat JBoss Data Grid 7/wildfly Red Hat Medium No fix reported