[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_qVOBfI9Ebjvu1YhCGluIIsHq--vN-xWUHICN6GXFzM":3,"g5a-risk:CVE-2020-25689":187},{"success":4,"data":5,"meta":185},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":50,"affectedProducts":51,"affectedProductsCount":89,"references":90,"referencesCount":104,"weaknesses":105,"weaknessesCount":114,"isActivelyExploited":115,"cisaInfo":27,"otxData":27,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":183,"notableEvents":184},"CVE-2020-25689","What is CVE-2020-25689?","A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.","A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections wh...","2020-11-02T21:15:27.647","2023-02-12T23:40:41.2",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":37,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",5.3,1.6,[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":42,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:N\u002FA:C","SINGLE","COMPLETE",6.8,8,6.9,0.01487,[49,49,49,49,49,49,47],0.015,"Medium",[52,57,61,65,68,71,75,79,83,86],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"redhat","wildfly","*","cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":59,"criteria":60,"vulnerable":4},"fuse","6.0.0","cpe:2.3:a:redhat:fuse:6.0.0:*:*:*:*:*:*:*",{"vendor":53,"product":62,"version":63,"criteria":64,"vulnerable":4},"jboss_data_grid","7.0.0","cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*",{"vendor":53,"product":66,"version":63,"criteria":67,"vulnerable":4},"jboss_enterprise_application_platform","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",{"vendor":53,"product":69,"version":63,"criteria":70,"vulnerable":4},"jboss_fuse","cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*",{"vendor":53,"product":72,"version":73,"criteria":74,"vulnerable":4},"openshift_application_runtimes","-","cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*",{"vendor":53,"product":76,"version":77,"criteria":78,"vulnerable":4},"single_sign-on","7.0","cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",{"vendor":80,"product":81,"version":73,"criteria":82,"vulnerable":4},"netapp","active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",{"vendor":80,"product":84,"version":73,"criteria":85,"vulnerable":4},"oncommand_insight","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",{"vendor":80,"product":87,"version":73,"criteria":88,"vulnerable":4},"service_level_manager","cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*",10,[91,99],{"url":92,"source":93,"tags":94},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2020-25689","Red Hat",[95,96,97,98],"Exploit","Issue Tracking","Patch","Vendor Advisory",{"url":100,"source":101,"tags":102},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20201123-0006\u002F","Netapp",[103],"Third Party Advisory",2,[106],{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":112,"structure":113},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",1,false,[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2020-25689? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-25689, a medium severity cyber security vulnerability from 2020. A memory leak flaw was found in WildFly in all versions u...","CVE-2020-25689, CVE-2020-25689 vulnerability, CVE-2020-25689 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, redhat security, netapp security, wildfly vulnerability, fuse vulnerability, jboss_data_grid vulnerability, jboss_enterprise_application_platform vulnerability, jboss_fuse vulnerability","\u002Fwhat-is\u002Fcve-2020-25689",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-25689","Cybersecurity","CVE-2020-25689, CVE-2020-25689 vulnerability, CVE-2020-25689 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143,151,167],{"Operator":27,"Negate":27,"Nodes":144},[145],{"Operator":146,"Negate":27,"CPEMatch":147},"OR",[148],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":150},"03BD2B88-A2AB-479B-8AE9-EB044A920A43","21.0.0",{"Operator":27,"Negate":27,"Nodes":152},[153],{"Operator":146,"Negate":27,"CPEMatch":154},[155,157,159,161,163,165],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FD89A07A-0277-43E8-9363-F77A43C89406",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"CD354E32-A8B0-484C-B4C6-9FBCD3430D2D",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"72A54BDA-311C-413B-8E4D-388AD65A170A",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B40CCE4F-EA2C-453D-BB76-6388767E5C6D",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A33441B3-B301-426C-A976-08CE5FE72EFB",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890",{"Operator":27,"Negate":27,"Nodes":168},[169],{"Operator":146,"Negate":27,"CPEMatch":170},[171,173,176,179,181],{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F3E0B672-3E06-4422-B2A4-0BD073AEC2A1",{"Vulnerable":4,"Criteria":174,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":177,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","B55E8D50-99B4-47EC-86F9-699B67D473CE",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":180,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F1BE6C1F-2565-4E97-92AA-16563E5660A5",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":182,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7081652A-D28B-494E-94EF-CA88117F23EE",[],[],{"lastModified":11,"cacheTime":186,"version":40},1792249632402,{"score":188,"band":50,"action":189,"scoredAt":190},46,"Plan remediation","2026-10-16T06:49:46.751925+00:00"]