Approved changes feed: RSS · Atom

cpe:2.3:a:red_hat:wildfly-core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRed Hat (a3686528-5679-55c9-b393-abe45df26bd2)
ProductWildfly Core (df5ec779-ec18-5fa8-ba42-9947bbe81cde)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25689 vulnerable 2026-06-08 05:22:37.205866 Details available
MEDIUM (5.3)
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Published: 2020-10-30T00:00:00.000Z
Updated: 2024-08-04T15:40:36.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14838 vulnerable 2026-06-08 05:12:56.227520 Details available
MEDIUM (5.2)
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server
Published: 2019-10-14T14:32:53.000Z
Updated: 2024-08-05T00:26:39.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10934 vulnerable 2026-06-08 05:10:37.409136 Details available
MEDIUM (5.4)
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
Published: 2019-03-27T12:20:07.000Z
Updated: 2024-08-05T07:54:36.087Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.