CVE-2020-14307mediumCWE-404

CVE-2020-14307: medium-severity vulnerability in Red Hat wildfly

Published · Updated

Follow this CVE+ Monitor wildfly

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.2%
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Red Hat · wildfly
Related CVEs — Red Hat wildfly

In the same product, most dangerous first.

CVE-2019-3894MEDIUMCVE-2019-3894EPSS 1.5%CVE-2020-14297MEDIUMCVE-2020-14297EPSS 1.2%CVE-2019-14887HIGHCVE-2019-14887EPSS 1.1%CVE-2019-3805MEDIUMCVE-2019-3805EPSS 0.2%