Product by Red Hat
Wildfly
12 known vulnerabilities in Wildfly (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2025-2251 | Wildfly: Deserialization of Untrusted Data | 6.2 | |
| Critical | CVE-2019-14887 | Red Hat Wildfly: Algorithm Downgrade | 7.4 | |
| High | CVE-2019-3894 | Red Hat Wildfly: Improperly Implemented Security Check for Standard | 5.4 | |
| Medium | CVE-2020-25689 | Red Hat Wildfly-core: Missing Release of Memory after Effective Lifetime | 5.3 | |
| Medium | CVE-2020-14307 | Red Hat Wildfly: Improper Resource Shutdown or Release | 6.5 | |
| Medium | CVE-2020-14297 | Red Hat Wildfly: Uncontrolled Resource Consumption | 6.5 | |
| High | CVE-2024-1233 | Eap: wildfly-elytron has a ssrf security issue | 7.3 | |
| Medium | CVE-2025-23367 | Org.wildfly.core:wildfly-server: wildfly improper rbac permission | 6.5 | |
| High | CVE-2024-10234 | Wildfly: wildfly vulnerable to cross-site scripting (xss) | 6.1 | |
| Medium | CVE-2024-12369 | Elytron-oidc-client: oidc authorization code injection | 4.2 | |
| Medium | CVE-2024-4029 | Wildfly: no timeout for eap management interface may lead to denial of service (dos) | 4.1 | |
| Medium | CVE-2019-3805 | Red Hat Wildfly: Signal Handler Race Condition | 5.5 |