Red Hat JBoss Enterprise Application Platform Continuous Delivery vulnerabilities

3 CVEs affecting Red Hat JBoss Enterprise Application Platform Continuous Delivery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14307, published 2020-07-24.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14307, published 2020-07-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a…
• CVE-2020-14297, published 2020-07-24. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down…
• CVE-2020-1732, published 2020-05-04. Medium severity, CVSS 4.2. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE Security with WildFly…