CVE search

402,579 vulnerabilities · 1,766 actively exploited (CISA KEV)

25 results

ID	Severity	Summary	Published
CVE-2021-3536	보통4.8	A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.	20/05/2021
CVE-2020-25711	보통6.5	A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.	03/12/2020
CVE-2020-25644	높음7.5	A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.