Wildfly Core (Redhat) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 260 known versions, newest CVE from 2025-03-04. Vendor: Redhat.

CVEs of Wildfly Core

• CVE-2025-23368 - CVSS 8.1 (high), 2025-03-04: A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts…
• CVE-2023-4061 - CVSS 6.5 (medium), 2023-11-08: A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the…
• CVE-2021-3717 - CVSS 7.8 (high), 2022-05-24: A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all…
• CVE-2021-3629 - CVSS 5.9 (medium), 2022-05-24: A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of…
• CVE-2019-14838 - CVSS 5.2 (medium), 2019-10-14: A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime…
• CVE-2018-10862 - CVSS 5.5 (medium), 2018-07-27: WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to…