Known vulnerabilities in Wildfly

Vendor: Red Hat Inc.
Software: Wildfly
Software CPE: cpe:2.3:a:red_hat:wildfly:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 13
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Wildfly Wildfly is affected by 13 known vulnerabilities: 1 critical, 1 high, 6 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106929 - Improper Access Control
CVE-2025-23367		 CWE-284 Medium
No
No
 27.0.1 03.04.2025 SB2025040321
SB2025040329
SB2025050938
and 3 more
#VU105956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10234		 CWE-79 Low
No
No
 35.0.0 24.03.2025 SB2025032404
SB2025032458
SB2025072352
and 3 more
#VU101867 - Creation of Temporary File With Insecure Permissions
CVE-2024-51127		 CWE-378 Low
No
No
 35.0.0 19.12.2024 SB2024121931
SB2025011664
SB2025021825
and 4 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 31.0.0 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 31.0.0 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 30.0.0 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635		 CWE-681 Medium
No
No
 30.0.0 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU69823 - Configuration
CVE-2022-1278		 CWE-16 Low
No
No
 27.0.0 02.12.2022 SB2022120207
SB2023040548
SB2023041912
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 27.0.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 27.0.0 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU54909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3536		 CWE-79 Medium
No
No
 23.0.2 15.07.2021 SB2021071512
SB2021071513
SB2021121542
#VU50176 - Missing release of memory after effective lifetime
CVE-2020-27822		 CWE-401 Medium
No
No
 21.0.1 08.12.2020 SB2020120857
#VU11069 - Resource exhaustion
CVE-2016-9589		 CWE-400 Low
No
No
 - 14.03.2018 -