Product by Red Hat
Wildfly
28 known vulnerabilities in Wildfly (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2016-9589 | Red Hat Wildfly: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2018-10683 | Red Hat WildFly: security vulnerability | 9.8 | |
| High | CVE-2020-10740 | Wildfly: Deserialization of Untrusted Data | 6.6 | |
| High | CVE-2020-1748 | Wildfly: Improper Access Control | 7.5 | |
| High | CVE-2020-10718 | Wildfly: security vulnerability | 7.5 | |
| Critical | CVE-2019-14887 | Red Hat Wildfly: Algorithm Downgrade | 7.4 | |
| High | CVE-2019-3894 | Red Hat Wildfly: Improperly Implemented Security Check for Standard | 5.4 | |
| Medium | CVE-2020-25689 | Red Hat Wildfly-core: Missing Release of Memory after Effective Lifetime | 5.3 | |
| Medium | CVE-2020-14307 | Red Hat Wildfly: Improper Resource Shutdown or Release | 6.5 | |
| Medium | CVE-2020-14297 | Red Hat Wildfly: Uncontrolled Resource Consumption | 6.5 | |
| High | CVE-2024-1233 | Eap: wildfly-elytron has a ssrf security issue | 7.3 | |
| Medium | CVE-2020-25640 | Wildfly: Generation of Error Message Containing Sensitive Information | 5.3 | |
| High | CVE-2022-1278 | WildFly: Initialization of a Resource with an Insecure Default | 7.5 | |
| Medium | CVE-2020-14338 | Wildfly: Improper Input Validation | 5.3 | |
| Medium | CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 | |
| Medium | CVE-2020-27822 | Wildfly: Missing Release of Memory after Effective Lifetime | 5.9 | |
| Medium | CVE-2018-14627 | JBoss/WildFly: Cleartext Transmission of Sensitive Information | 5.3 | |
| High | CVE-2024-10234 | Wildfly: wildfly vulnerable to cross-site scripting (xss) | 6.1 | |
| Medium | CVE-2021-3503 | Wildfly: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2022-0866 | Wildfly: Incorrect Authorization | 5.3 | |
| Low | CVE-2021-3644 | Wildfly-core: Exposure of Sensitive Information to an Unauthorized Actor | 3.3 | |
| Medium | CVE-2021-20250 | Wildfly: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2020-1719 | Wildfly: Privilege Context Switching Error | 5.4 | |
| High | CVE-2021-3717 | Wildfly: Files or Directories Accessible to External Parties | 7.8 | |
| Medium | CVE-2018-1047 | Red Hat Wildfly: Improper Input Validation | 5.5 |