CVE-2020-14297CWE-400

A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the…

Medium · published July 24, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01203 · 68.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2020-07-24T15:37Z
EPSS history
Timeline
  • 24 JUL 15:37Z
    A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the…
    cvelistv5