1377 matches found
CVE-2025-2251
A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...
Red Hat JBoss Enterprise Application Platform和Red Hat Wildfly 代码问题漏洞
Red Hat JBoss Enterprise Application Platform EAP and Red Hat Wildfly are both products of Red Hat, Inc.Red Hat JBoss Enterprise Application Platform is an open source, J2EE-based middleware platform. J2EE-based middleware platform. The platform is mainly used for building, deploying and hosting...
PT-2025-15231
Name of the Vulnerable Software and Affected Versions WildFly affected versions not specified JBoss Enterprise Application Platform EAP affected versions not specified Description A security flaw exists within the Enterprise JavaBeans EJB remote invocation mechanism, stemming from untrusted data...
CVE-2025-27427 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-3W85-5P9G-H334 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-3W85-5P9G-H334 vulnerabilities
Vulnerabilities for packages: wildfly...
CVE-2025-27427 vulnerabilities
Vulnerabilities for packages: wildfly...
org.wildfly.core:wildfly-server: Wildfly improper RBAC permission
A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
org.wildfly.core:wildfly-server: Wildfly improper RBAC permission
A flaw was found in the Wildfly Server Role Based Access Control RBAC provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor ro...
CVE-2024-12369 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-5565-3C98-G6JC vulnerabilities
Vulnerabilities for packages: wildfly...
CVE-2024-12369 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-5565-3C98-G6JC vulnerabilities
Vulnerabilities for packages: wildfly...
WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
Impact A vulnerability was found in OIDC-Client. When using the elytron-oidc-client subsystem with WildFly, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is...
GHSA-5565-3C98-G6JC WildFly Elytron OpenID Connect Client ExtensionOIDC authorization code injection attack
Impact A vulnerability was found in OIDC-Client. When using the elytron-oidc-client subsystem with WildFly, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is...
CVE-2025-2240 vulnerabilities
Vulnerabilities for packages: wildfly, apicurio-registry...
GHSA-GFH6-3PQW-X2J4 vulnerabilities
Vulnerabilities for packages: wildfly, apicurio-registry...