Sql injection

2020-07-2416:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

A vulnerability was found in Wildfly’s Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.

CPENameOperatorVersion
amqeq2.0
jboss_fuseeq6.0.0
single_sign-oneq7.0

Name	Operator	Version
amq	eq	2.0
jboss_fuse	eq	6.0.0
single_sign-on	eq	7.0

References

bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14307