Red Hat JBoss-Ejb-Client vulnerabilities

2 CVEs affecting Red Hat JBoss-Ejb-Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20250, published 2021-05-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-14297, published 2020-07-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down…
CVE-2021-20250, published 2021-05-13. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in wildfly. The JBoss EJB client has publicly accessible privileged actions which may lead to information disclosure on the server it is deployed on. The highest threat from this…