Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Operations Network 3/wildfly
Red Hat
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Incorrect Authorization in WildFly Elytron
CVE-2020-1748 · GHSA-QGRQ-CX4C-2RMM
org.wildfly.security:wildfly-elytron
Red Hat Fuse 7/wildfly
Maven
Red Hat
High
Fix reported
2026-09-10
Wildfly-Core user account mismanagement
CVE-2021-3717 · GHSA-P9XF-3RM3-QH2H
org.wildfly.core:wildfly-core-parent
Red Hat Data Grid 8/wildfly
Maven
Red Hat
High
Fix reported
2024-02-17
Wildfly has a memory leak vulnerability
CVE-2020-27822 · GHSA-QX3P-9MMP-4V8H
org.wildfly:wildfly-parent
Red Hat JBoss Data Grid 7/wildfly
Maven
Red Hat
Medium
Fix reported
2023-08-23
Wildfly Unsafe Deserialization Vulnerability
CVE-2020-10740 · GHSA-VRMW-2XHQ-HRMP
org.wildfly:wildfly-parent
Red Hat JBoss Data Virtualization 6/jbossas
Maven
Red Hat
High
Fix reported
2023-08-22
Wildfly logs plaintext passwords
CVE-2020-25640 · GHSA-JW3V-5CH2-WFMM
org.wildfly:wildfly-parent
Red Hat JBoss Data Grid 7/wildfly
Maven
Red Hat
Medium
Fix reported
2023-07-14
Privilege Context Switching Error in wildlfy
CVE-2020-1719 · GHSA-P9CF-QJXQ-VXW6
org.wildfly.bom:wildfly
Red Hat JBoss Data Virtualization 6/jbossas
Maven
Red Hat
Medium
Fix reported
2023-02-01
RichFaces: Remote Command Execution via insufficient EL parameter sanitization
CVE-2015-0279
Red Hat JBoss Operations Network 3/wildfly
Red Hat JBoss Portal 5/richfaces
Red Hat
High
No fix reported
Not recorded
EAP: CSRF vulnerability in EAP & WildFly Web Console
CVE-2015-5188
Red Hat JBoss Operations Network 3/wildfly
Red Hat
Medium
No fix reported
Not recorded
Soteria: security identity corruption across concurrent threads
CVE-2020-1732
Red Hat JBoss Data Virtualization 6/jbossas
Red Hat JBoss Data Virtualization 6/wildfly
Red Hat
Low
No fix reported
Not recorded
wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use
CVE-2019-14887
Red Hat JBoss Data Grid 7/wildfly
Red Hat JBoss Data Virtualization 6/jbossas
Red Hat
Medium
No fix reported
Not recorded
wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API
CVE-2020-10718
Red Hat Fuse 7/wildfly
Red Hat JBoss Data Grid 7/wildfly
Red Hat
Medium
No fix reported
Not recorded