Linux Distros Unpatched Vulnerability : CVE-2024-1635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http- client protocol. Whenever a malicious user opens and...

GHSA-G4PX-6QHM-HQJM vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-48913 vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-48913 vulnerabilities

Vulnerabilities for packages: wildfly...

GHSA-G4PX-6QHM-HQJM vulnerabilities

Vulnerabilities for packages: wildfly...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-config-cli, apicurio-registry, wildfly, sonarqube, jenkins, thingsboard, apache-nifi, dependency-track...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-config-cli, apicurio-registry, wildfly, sonarqube, jenkins, thingsboard, apache-nifi, dependency-track...

GHSA-9342-92GG-6V29 vulnerabilities

Vulnerabilities for packages: dependency-track, elasticsearch, elasticsearch-fips, apicurio-registry, keycloak-config-cli, thingsboard, jenkins, wildfly, geoserver, apache-nifi, keycloak, sonarqube, commercial-elasticsearch...

CVE-2025-7962 vulnerabilities

Vulnerabilities for packages: dependency-track, elasticsearch, elasticsearch-fips, apicurio-registry, keycloak-config-cli, thingsboard, jenkins, wildfly, geoserver, apache-nifi, keycloak, sonarqube, commercial-elasticsearch...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

GHSA-36WV-V2QP-V4G4 vulnerabilities

Vulnerabilities for packages: wildfly, apache-tika...

CVE-2025-48795 vulnerabilities

Vulnerabilities for packages: wildfly, apache-tika...

CVE-2025-48795 vulnerabilities

Vulnerabilities for packages: wildfly, apache-tika, wso2is...

GHSA-36WV-V2QP-V4G4 vulnerabilities

Vulnerabilities for packages: wildfly, apache-tika, wso2is...

wildfly: Wildfly vulnerable to Cross-Site Scripting (XSS)

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server...

org.jboss.eap:wildfly-ejb3: Improper Deserialization in JBoss Marshalling Allows Remote Code Execution

A security flaw exists in WildFly and JBoss Enterprise Application Platform EAP within the Enterprise JavaBeans EJB remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted...

org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...