CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14838

A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.8%

CVSS Severity

CVSS v3 Score 5.2

CVSS v2 Score 4.0

References

Products affected by CVE-2019-14838

Redhat » Data Grid » Version: 7.3.4

cpe:2.3:a:redhat:data_grid:7.3.4
Redhat » Jboss Enterprise Application Platform » Version: 7.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.0
Redhat » Jboss Enterprise Application Platform » Version: 7.2.4

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.4
Redhat » Jboss Enterprise Application Platform » Version: 7.2.5

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2.5
Redhat » Jboss Enterprise Application Platform » Version: 7.3.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0
Redhat » Single Sign-On » Version: 7.3.5

cpe:2.3:a:redhat:single_sign-on:7.3.5
Redhat » Wildfly Core » Version: 7.0.0

cpe:2.3:a:redhat:wildfly_core:7.0.0
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14838

Products

Pricing

Contact Us