CVE-2020-14297

Technical details for CVE-2020-14297 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2020-14307

CVE-2020-14307 affects WildFly’s EJB components shipped with Red Hat JBoss EAP 7. SessionOpenInvocations are not removed from the remote InvocationTracker after a response, on both client and server. This can cause a denial of service, making the service unavailable. The provided documents do not...

CVE-2022-1278

Summary: CVE-2022-1278 affects WildFly and relates to information disclosure via the trace payload, allowing an attacker to view deployment names, endpoints, and other data contained in traces. What is affected: WildFly stack (as referenced across CVE listings and Red Hat advisories) with exposur...

CVE-2015-5183

CVE-2015-5183 affects Red Hat AMQ/Hawtio console where cookies are missing HTTPOnly and Secure attributes. This exposes session cookies and could enable session-reuse or related unauthorized access in affected deployments. Public mentions and Red Hat advisories confirm the issue as a cookie secur...

CVE-2015-5182

CVE-2015-5182 is a CSRF vulnerability in the jolokia API of Red Hat JBoss A-MQ (ActiveMQ-based). The connected documents specify that an authenticated user could be tricked by visiting a malicious page, causing the user’s session to perform unintended actions via the jolokia interface (CSRF). The...

CVE-2015-5184

CVE-2015-5184 affects Red Hat JBoss A-MQ/Hawtio console. The vulnerability arises from the Hawtio console’s HTTP response headers: the Access-Control-Allow-Origin header is not restricted, allowing remote attackers to access sensitive information exposed by the console. Functional impact is infor...