Search Results (23 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-25644 2 Netapp, Redhat 12 Oncommand Insight, Oncommand Workflow Automation, Service Level Manager and 9 more 2024-11-21 7.5 High
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
CVE-2020-10771 3 Infinispan, Netapp, Redhat 4 Infinispan-server-rest, Oncommand Insight, Data Grid and 1 more 2024-11-21 7.1 High
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.
CVE-2019-14838 1 Redhat 10 Data Grid, Enterprise Linux, Jboss Data Grid and 7 more 2024-11-21 4.9 Medium
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server