CVE-2020-14297
Wildfly EJB Client causes DoS
6.5
MEDIUM
CVSS 3.1
EPSS 0.25%
Description
A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventually unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.
How to fix CVE-2020-14297
To remediate CVE-2020-14297, upgrade the affected package to a fixed version below.
- —upgrade to 4.0.34.Final or later
Is CVE-2020-14297 being exploited?
Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 4.0.34.Final
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |