org.wildfly.core:wildfly-core-dist (3.0.0.alpha6), org.wildfly.core:wildfly-core-feature-pack (3.0.0.alpha6) +14 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (3.0.0.alpha6)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.alpha6 - org.wildfly.core:wildfly-core-feature-pa...

org.wildfly.core:wildfly-core-dist (2.2.0.cr7), org.wildfly.core:wildfly-core-feature-pack (2.2.0.cr7) +14 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (2.2.0.cr7)

org.wildfly.core:wildfly-server MAVEN version 2.2.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 2.2.0.cr7 - org.wildfly.core:wildfly-core-feature-pack...

org.wildfly.core:wildfly-core-dist (3.0.0.beta6), org.wildfly.core:wildfly-core-feature-pack (3.0.0.beta6) +17 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (3.0.0.beta6)

org.wildfly.core:wildfly-server MAVEN version 3.0.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.0.beta6 - org.wildfly.core:wildfly-core-feature-pack...

org.wildfly.core:wildfly-cli (2.0.0.beta2), org.wildfly.core:wildfly-core-dist (2.0.0.beta2) +16 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (2.0.0.beta2)

org.wildfly.core:wildfly-server MAVEN version 2.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-cli 2.0.0.beta2 - org.wildfly.core:wildfly-core-dist 2.0.0.beta2 -...

org.wildfly.core:wildfly-core-dist (3.0.6.final), org.wildfly.core:wildfly-core-feature-pack (3.0.6.final) +18 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (3.0.6.final)

org.wildfly.core:wildfly-server MAVEN version 3.0.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - org.wildfly.core:wildfly-core-dist 3.0.6.final - org.wildfly.core:wildfly-core-feature-pack...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (>=4.0.0.beta1, <=4.3.0.final) +3 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (>=4.0.0.beta1, <=4.3.0.final)

org.keycloak:keycloak-services MAVEN version =4.0.0.beta1, =4.1.0.final, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final Source cves: CVE-2018-10894 Source advisory: GHSA-XVV8-8WH9-9FH2...

io.undertow:undertow-http2-test-suite (1.2.0.cr1), io.undertow:undertow-servlet (1.2.0.cr1) +11 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.2.0.cr1)

io.undertow:undertow-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.cr1 - io.undertow:undertow-servlet 1.2.0.cr1 -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-dependencies-server-min (10.0.0) +5 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (10.0.0)

org.keycloak:keycloak-services MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-dependencies-server-m...

Red Hat Undertow 竞争条件问题漏洞

Red Hat Undertow is a Java-based embedded web server from Red Hat, Inc. and is the default web server for Wildfly Java Application Server. Red Hat Undertow suffers from a security vulnerability that stems from the HTTP2SourceChannel's inability to write final frames under certain circumstances...

OpenSSL Uncontrolled Resource Consumption DoS

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

Wildfly Data Compromise

The vulnerability of the Wildfly application server is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...

WildFly Synchronization Process Termination

The vulnerability of the WildFly application server in Java is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to terminate arbitrary processes in the system by modifying the PID file located at /var/run/jboss-eap/...

wildfly: Some EJB transaction objects may get accumulated causing Denial of Service

A flaw was found in Wildfly's EJB Client, where the accumulation of specific EJB transaction objects over time can cause services to slow down and eventually become unavailable. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is to system...

JBoss/WildFly: iiop does not honour strict transport confidentiality

The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections:...

br.eti.clairton:ds-test (>=0.4.0, <=1.1.0), com.antonyudin.wildfly.security:ay-securityrealm-ejb (1.0) +254 more potentially affected by CVE-2018-10862 via org.wildfly.core:wildfly-server (>=1.0.0.alpha16, <=6.0.0.alpha2)

org.wildfly.core:wildfly-server MAVEN version =1.0.0.alpha16, =0.4.0, =1.0.1, =6.2.0, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.0.0.final, =2.2.1.final and more Source cves: CVE-2018-10862 Source advisory: MEND:CVE-2018-10862...

PT-2015-2598 · Red Hat · Red Hat Jboss Enterprise Application Platform +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Application Platform versions prior to 6.4.4 WildFly formerly JBoss Application Server versions prior to 6.4.4 Description: The issue is related to the Management Console in Red Hat Enterprise Application Platform and...