Read the docs

Red Hat

Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

18 records in Wildfly · all components

TI-2020-08639 CVE-2020-10740 · GHSA-vrmw-2xhq-hrmp

Deserialization of untrusted data in [UNKNOWN] wildfly

Priority LOW 37

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02067 Published 2020-06-22 Partial fix · 20.0.0.Final CWE-502
TI-2020-15705 CVE-2020-25689 · GHSA-97hp-6q9g-5cw2

Memory leak in Red Hat wildfly-core

Priority LOW 32

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01487 Published 2020-10-30 Partial fix · 21.0.1 CWE-401
TI-2020-16893 CVE-2020-27822 · GHSA-qx3p-9mmp-4v8h

Memory leak in wildfly

Priority LOW 29

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01122 Published 2020-12-08 Partial fix · 21.0.2.Final, 22.0.0.Beta1 CWE-401
TI-2020-15658 CVE-2020-25640 · GHSA-jw3v-5ch2-wfmm

Information disclosure through error messages in wildfly

Priority LOW 27

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01348 Published 2020-11-24 Partial fix · 21.0.0.Final CWE-209
TI-2022-00772 CVE-2022-0866 · GHSA-pjxg-p9c7-7c3v

Incorrect authorization in Wildfly

Priority LOW 26

This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00902 Published 2022-05-10 Partial fix CWE-863
TI-2020-01663 CVE-2020-1719 · GHSA-p9cf-qjxq-vxw6

A flaw was found in wildfly.

Priority LOW 25

A flaw was found in wildfly.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00575 Published 2021-06-07 Partial fix · 20.0.0.Final CWE-270
TI-2021-02490 CVE-2021-3536 · GHSA-v2wx-jj66-2hp7

Cross-site scripting in wildfly

Priority LOW 23

A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00533 Published 2021-05-20 Partial fix · 23.0.2.Final CWE-79
TI-2021-02462 CVE-2021-3503 · GHSA-c4r5-xvgw-2942

Information disclosure in wildfly

Priority LOW 22

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01089 Published 2022-04-18 Fixed in 23.0.1.Final CWE-200
TI-2019-02817 CVE-2019-3805 · GHSA-p2vr-qm33-hrfc

Improper privilege management in Red Hat wildfly

Priority LOW 21

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.0019 Published 2019-05-03 Partial fix CWE-364
TI-2021-02589 CVE-2021-3644 · GHSA-w88m-2936-rmxr

Information disclosure in wildfly-core

Priority LOW 18

A flaw was found in wildfly-core in all versions.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00982 Published 2022-08-26 Partial fix · 16.0.1.Final, 17.0.0.Beta3 CWE-200
Open these records in search →