Red Hat JBoss WildFly Application Server 10.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_wildfly_application_server:10.0.0:*:*:*:*:*:*:*
part: a version: 10.0.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Wildfly Application Server (6270900b-cf0a-5389-84cc-9d8a8bc45da9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jboss/metadata |
purl2cpe | 2026-06-01 10:12:52.545847 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1047 |
vulnerable | 2026-06-08 05:11:16.732067 |
Details available
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
Published: 2018-01-24T23:00:00.000Z
Updated: 2024-08-05T03:44:12.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4993 |
vulnerable | 2026-06-08 05:07:55.892194 |
Details available
CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Published: 2016-09-26T14:00:00.000Z
Updated: 2024-08-06T00:46:40.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0793 |
vulnerable | 2026-06-08 05:07:16.308658 |
Details available
Incomplete blacklist vulnerability in the servlet filter restriction mechanism in WildFly (formerly JBoss Application Server) before 10.0.0.Final on Windows allows remote attackers to read the sensitive files in the (1) WEB-INF or (2) META-INF directory via a request that contains (a) lowercase or (b) "meaningless" characters.
Published: 2016-04-01T19:00:00.000Z
Updated: 2024-08-05T22:30:04.949Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.