[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIyeyf-ZPXPYF-NB073E0g_XwhwEd5P1cZTEMiX2Wkis":3,"g5a-ex:redhat\u002Fwildfly@*":252,"g5a-family:redhat\u002Fwildfly":254},{"success":4,"data":5},true,{"product":6,"versions":115,"topVulnerabilitiesByEpss":165,"kevVulnerabilities":229,"seoMetadata":230,"meta":249},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":114},"redhat","wildfly",49,18,0,"2025-01-30",[14,17,19,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.0",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"10.1.2",1,{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},"11.0.0",{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.0",{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},"13.0.0",{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.0",{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.1",{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.0",{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},"15.0.1",{"version":37,"cve_count":21,"kev_count":11,"has_kev":16},"16.0.0",{"version":39,"cve_count":21,"kev_count":11,"has_kev":16},"17.0.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"17.0.1",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.0",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"18.0.1",{"version":47,"cve_count":21,"kev_count":11,"has_kev":16},"19.0.0",{"version":49,"cve_count":21,"kev_count":11,"has_kev":16},"19.1.0",{"version":51,"cve_count":21,"kev_count":11,"has_kev":16},"20.0.0",{"version":53,"cve_count":21,"kev_count":11,"has_kev":16},"20.0.1",{"version":55,"cve_count":21,"kev_count":11,"has_kev":16},"21.0.0",{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.1",{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},"21.0.2",{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.0",{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},"22.0.1",{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.0",{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.1",{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},"23.0.2",{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.0",{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},"24.0.1",{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},"25.0.0",{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},"25.0.1",{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},"26.0.0",{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},"26.0.1",{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},"26.1.0",{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},"26.1.1",{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},"26.1.2",{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},"26.1.3",{"version":91,"cve_count":21,"kev_count":11,"has_kev":16},"27.0.0",{"version":93,"cve_count":21,"kev_count":11,"has_kev":16},"28.0.0",{"version":95,"cve_count":21,"kev_count":11,"has_kev":16},"7.2.0",{"version":97,"cve_count":21,"kev_count":11,"has_kev":16},"7.2.3",{"version":99,"cve_count":21,"kev_count":11,"has_kev":16},"7.2.5",{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},"8.0.0",{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},"8.1.0",{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.0",{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},"8.2.1",{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.0",{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.1",{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},"9.0.2","Wildfly by Redhat is a technology product with 49 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":11,"kev_count":11,"has_kev":16},{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},{"version":37,"cve_count":21,"kev_count":11,"has_kev":16},{"version":39,"cve_count":21,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":21,"kev_count":11,"has_kev":16},{"version":49,"cve_count":21,"kev_count":11,"has_kev":16},{"version":51,"cve_count":21,"kev_count":11,"has_kev":16},{"version":53,"cve_count":21,"kev_count":11,"has_kev":16},{"version":55,"cve_count":21,"kev_count":11,"has_kev":16},{"version":57,"cve_count":11,"kev_count":11,"has_kev":16},{"version":59,"cve_count":11,"kev_count":11,"has_kev":16},{"version":61,"cve_count":11,"kev_count":11,"has_kev":16},{"version":63,"cve_count":11,"kev_count":11,"has_kev":16},{"version":65,"cve_count":11,"kev_count":11,"has_kev":16},{"version":67,"cve_count":11,"kev_count":11,"has_kev":16},{"version":69,"cve_count":11,"kev_count":11,"has_kev":16},{"version":71,"cve_count":11,"kev_count":11,"has_kev":16},{"version":73,"cve_count":11,"kev_count":11,"has_kev":16},{"version":75,"cve_count":11,"kev_count":11,"has_kev":16},{"version":77,"cve_count":11,"kev_count":11,"has_kev":16},{"version":79,"cve_count":11,"kev_count":11,"has_kev":16},{"version":81,"cve_count":11,"kev_count":11,"has_kev":16},{"version":83,"cve_count":11,"kev_count":11,"has_kev":16},{"version":85,"cve_count":11,"kev_count":11,"has_kev":16},{"version":87,"cve_count":11,"kev_count":11,"has_kev":16},{"version":89,"cve_count":11,"kev_count":11,"has_kev":16},{"version":91,"cve_count":21,"kev_count":11,"has_kev":16},{"version":93,"cve_count":21,"kev_count":11,"has_kev":16},{"version":95,"cve_count":21,"kev_count":11,"has_kev":16},{"version":97,"cve_count":21,"kev_count":11,"has_kev":16},{"version":99,"cve_count":21,"kev_count":11,"has_kev":16},{"version":101,"cve_count":11,"kev_count":11,"has_kev":16},{"version":103,"cve_count":11,"kev_count":11,"has_kev":16},{"version":105,"cve_count":11,"kev_count":11,"has_kev":16},{"version":107,"cve_count":11,"kev_count":11,"has_kev":16},{"version":109,"cve_count":11,"kev_count":11,"has_kev":16},{"version":111,"cve_count":11,"kev_count":11,"has_kev":16},{"version":113,"cve_count":11,"kev_count":11,"has_kev":16},[166,174,181,188,194,199,205,211,217,223],{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"cvssVersion":171,"severity":172,"isKev":16,"epssScore":173},"CVE-2020-10740","A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation\u002Ffiltering capabilities in wildfly.","2020-06-22",7.5,"v3.1","High",0.02067,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":178,"cvssVersion":171,"severity":179,"isKev":16,"epssScore":180},"CVE-2018-10683","An issue was discovered in WildFly 10.1.2.Final. In the case of a default installation without a security realm reference, an attacker can successfully access the server without authentication. NOTE: the Security Realms documentation in the product's Admin Guide indicates that \"without a security realm reference\" implies \"effectively unsecured.\" The vendor explicitly supports these unsecured configurations because they have valid use cases during development","2018-05-09",9.8,"Critical",0.01756,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":171,"severity":186,"isKev":16,"epssScore":187},"CVE-2020-25689","A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.","2020-11-02",6.5,"Medium",0.01487,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":192,"cvssVersion":171,"severity":172,"isKev":16,"epssScore":193},"CVE-2019-3894","It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not necessarily terminate if the keep alive time has not expired. This could allow a shared thread to use the wrong security identity when executing.","2019-05-03",8.8,0.01481,{"cveId":195,"description":196,"publishedDate":197,"cvssScore":170,"cvssVersion":171,"severity":172,"isKev":16,"epssScore":198},"CVE-2020-10718","A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is to confidentiality.","2020-09-16",0.01435,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":203,"cvssVersion":171,"severity":186,"isKev":16,"epssScore":204},"CVE-2020-25640","A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.","2020-11-24",5.3,0.01348,{"cveId":206,"description":207,"publishedDate":208,"cvssScore":209,"cvssVersion":171,"severity":186,"isKev":16,"epssScore":210},"CVE-2020-27822","A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.","2020-12-08",5.9,0.01122,{"cveId":212,"description":213,"publishedDate":214,"cvssScore":209,"cvssVersion":215,"severity":186,"isKev":16,"epssScore":216},"CVE-2018-14627","The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: \u003Ctransport-config confidentiality=\"required\" trust-in-target=\"supported\"\u002F>","2018-09-04","v3.0",0.01112,{"cveId":218,"description":219,"publishedDate":220,"cvssScore":221,"cvssVersion":171,"severity":179,"isKev":16,"epssScore":222},"CVE-2019-14887","A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption. This could lead to a leak of the data being passed over the network. Wildfly version 7.2.0.GA, 7.2.3.GA and 7.2.5.CR2 are believed to be vulnerable.","2020-03-16",9.1,0.01095,{"cveId":224,"description":225,"publishedDate":226,"cvssScore":227,"cvssVersion":171,"severity":186,"isKev":16,"epssScore":228},"CVE-2021-3503","A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.","2022-04-18",4.3,0.01089,[],{"title":231,"metaDescription":232,"keywords":233,"structuredData":234},"Wildfly by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Wildfly by Redhat covering 49 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Wildfly vulnerabilities, Wildfly security, Wildfly CVE, Redhat Wildfly, Wildfly threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":235,"@type":236,"name":237,"description":232,"url":238,"manufacturer":239,"applicationCategory":243,"softwareVersion":244,"mainEntity":245},"https:\u002F\u002Fschema.org","SoftwareApplication","Wildfly","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fwildfly",{"@type":240,"name":241,"url":242},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","49 versions tracked",{"@type":246,"name":247,"description":248,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Wildfly Security Vulnerabilities","Security vulnerabilities affecting Wildfly by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":250,"apiVersion":251},"2026-10-17T14:58:13.809Z","3.0",{"rows":253,"total":11,"capped":16,"failed":11},[],[255,258,260],{"product":256,"cves":257},"wildfly_core",5,{"product":259,"cves":257},"wildfly_elytron",{"product":261,"cves":21},"wildfly_openssl"]