Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-15562

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 (or :9990, or :4447) and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss-remoting Jboss Enterprise Application Platform Jboss Enterprise Application Platform Els and 2 more
CVE-2020-35510

jboss-remoting: Threads hold up forever in the EJB server by suppressing the ack from an EJB client

A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Jboss-remoting Jboss Enterprise Application Platform Jboss Fuse and 2 more
CVE-2019-19343

Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitely

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Jboss-remoting Jboss Enterprise Application Platform and 3 more
CVE-2018-1041

jboss-remoting: High CPU Denial of Service

A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer. An attacker could use this flaw to cause denial of service via high CPU caused by an infinite loop.

CVSS 3.0 · 7.5 High EPSS 15.5% KEV · Not listed
Vendors
Jboss Redhat
Products
Jboss-remoting Jboss Enterprise Application Platform Linux