Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss-ejb-client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Ejb Client (4529db72-fca4-572b-a4ee-72ccdc3b9f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wildfly/jboss-ejb-client purl2cpe 2026-06-01 10:12:55.537444
pkg:maven/org.jboss/jboss-ejb-client purl2cpe 2026-06-01 10:12:55.537446

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20250 vulnerable 2026-06-08 05:29:08.812216 Details available
A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this vulnerability is to data confidentiality.
Published: 2021-05-13T13:35:25.000Z
Updated: 2024-08-03T17:37:23.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14297 vulnerable 2026-06-08 05:19:22.856073 Details available
MEDIUM (6.5)
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.
Published: 2020-07-24T15:37:25.000Z
Updated: 2024-10-15T17:14:53.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.