JBoss/WildFly: iiop does not honour strict transport confidentiality
Published Sep 4, 2018
5.9
MEDIUMCVSS 3.0
EPSS 1.11%
Description
The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>
Affected products
- Vendor n/a Product JBoss/WildFly Defaultn/a
- Version 14.0.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | JBoss/WildFly | n/a |
|
No data.
Red Hat JBoss EAP 7.1
wildfly-iiop-openjdk
Fixed · RHSA-2018:3527
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-activemq-artemis-0:1.5.5.014-1.redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-elytron-web-0:1.0.2-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-glassfish-jsf-0:2.2.13-7.SP6_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-hibernate-0:5.1.16-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-ironjacamar-0:1.4.11-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jboss-marshalling-0:2.0.6-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jboss-modules-0:1.6.5-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jboss-server-migration-0:1.0.7-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jboss-vfs-0:3.2.13-1.Final_redhat_1.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jboss-xnio-base-0:3.5.6-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jbossws-common-0:3.1.6-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-jbossws-cxf-0:5.1.11-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-log4j-jboss-logmanager-0:1.1.6-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-picketbox-0:5.0.3-2.Final_redhat_3.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-picketlink-bindings-0:2.5.5-14.SP12_redhat_2.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-picketlink-federation-0:2.5.5-14.SP12_redhat_2.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-undertow-0:1.4.18-8.SP9_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-undertow-jastow-0:2.0.6-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-0:7.1.5-4.GA_redhat_00002.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-client-config-0:1.0.1-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-elytron-0:1.1.11-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-elytron-tool-0:1.0.8-1.Final_redhat_00001.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-javadocs-0:7.1.5-2.GA_redhat_00002.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-openssl-0:1.0.6-2.Final_redhat_2.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6
eap7-wildfly-openssl-linux-0:1.0.6-15.Final_redhat_2.1.ep7.el6
Fixed · RHSA-2018:3529
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-activemq-artemis-0:1.5.5.014-1.redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-elytron-web-0:1.0.2-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-glassfish-jsf-0:2.2.13-7.SP6_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-hibernate-0:5.1.16-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-ironjacamar-0:1.4.11-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jboss-marshalling-0:2.0.6-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jboss-modules-0:1.6.5-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jboss-server-migration-0:1.0.7-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jboss-vfs-0:3.2.13-1.Final_redhat_1.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jboss-xnio-base-0:3.5.6-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jbossws-common-0:3.1.6-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-jbossws-cxf-0:5.1.11-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-log4j-jboss-logmanager-0:1.1.6-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-picketbox-0:5.0.3-2.Final_redhat_3.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-picketlink-bindings-0:2.5.5-14.SP12_redhat_2.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-picketlink-federation-0:2.5.5-14.SP12_redhat_2.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-undertow-0:1.4.18-8.SP9_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-undertow-jastow-0:2.0.6-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-0:7.1.5-4.GA_redhat_00002.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-client-config-0:1.0.1-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-elytron-0:1.1.11-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-elytron-tool-0:1.0.8-1.Final_redhat_00001.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-javadocs-0:7.1.5-2.GA_redhat_00002.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-openssl-0:1.0.6-2.Final_redhat_2.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7
eap7-wildfly-openssl-linux-0:1.0.6-15.Final_redhat_2.1.ep7.el7
Fixed · RHSA-2018:3528
Red Hat Single Sign-On 7.2.5 zip
wildfly-iiop-openjdk
Fixed · RHSA-2018:3595
Red Hat Decision Manager 7
wildfly-iiop-openjdk
Will not fix
Red Hat JBoss Data Grid 7
wildfly-iiop-openjdk
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 7.1 | wildfly-iiop-openjdk | Fixed | RHSA-2018:3527 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-activemq-artemis-0:1.5.5.014-1.redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-elytron-web-0:1.0.2-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-glassfish-jsf-0:2.2.13-7.SP6_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-hibernate-0:5.1.16-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-ironjacamar-0:1.4.11-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jboss-marshalling-0:2.0.6-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jboss-modules-0:1.6.5-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jboss-server-migration-0:1.0.7-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jboss-vfs-0:3.2.13-1.Final_redhat_1.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jboss-xnio-base-0:3.5.6-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jbossws-common-0:3.1.6-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-jbossws-cxf-0:5.1.11-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-log4j-jboss-logmanager-0:1.1.6-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-picketbox-0:5.0.3-2.Final_redhat_3.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-picketlink-bindings-0:2.5.5-14.SP12_redhat_2.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-picketlink-federation-0:2.5.5-14.SP12_redhat_2.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-undertow-0:1.4.18-8.SP9_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-undertow-jastow-0:2.0.6-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-0:7.1.5-4.GA_redhat_00002.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-client-config-0:1.0.1-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-elytron-0:1.1.11-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-elytron-tool-0:1.0.8-1.Final_redhat_00001.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-javadocs-0:7.1.5-2.GA_redhat_00002.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-openssl-0:1.0.6-2.Final_redhat_2.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 | eap7-wildfly-openssl-linux-0:1.0.6-15.Final_redhat_2.1.ep7.el6 | Fixed | RHSA-2018:3529 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-activemq-artemis-0:1.5.5.014-1.redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-elytron-web-0:1.0.2-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-glassfish-jsf-0:2.2.13-7.SP6_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-hibernate-0:5.1.16-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-ironjacamar-0:1.4.11-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jboss-marshalling-0:2.0.6-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jboss-modules-0:1.6.5-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jboss-server-migration-0:1.0.7-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jboss-vfs-0:3.2.13-1.Final_redhat_1.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jboss-xnio-base-0:3.5.6-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jbossws-common-0:3.1.6-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-jbossws-cxf-0:5.1.11-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-log4j-jboss-logmanager-0:1.1.6-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-picketbox-0:5.0.3-2.Final_redhat_3.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-picketlink-bindings-0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-picketlink-federation-0:2.5.5-14.SP12_redhat_2.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-undertow-0:1.4.18-8.SP9_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-undertow-jastow-0:2.0.6-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-0:7.1.5-4.GA_redhat_00002.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-client-config-0:1.0.1-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-elytron-0:1.1.11-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-elytron-tool-0:1.0.8-1.Final_redhat_00001.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-javadocs-0:7.1.5-2.GA_redhat_00002.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-openssl-0:1.0.6-2.Final_redhat_2.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 | eap7-wildfly-openssl-linux-0:1.0.6-15.Final_redhat_2.1.ep7.el7 | Fixed | RHSA-2018:3528 |
| Red Hat Single Sign-On 7.2.5 zip | wildfly-iiop-openjdk | Fixed | RHSA-2018:3595 |
| Red Hat Decision Manager 7 | wildfly-iiop-openjdk | Will not fix | n/a |
| Red Hat JBoss Data Grid 7 | wildfly-iiop-openjdk | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1 other source (Red Hat) ▾
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
AV:N/AC:M/Au:N/C:P/I:N/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
- EPSS v4
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
- EPSS v4
Table of values (13 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 1.11% (0.01112) | 64.73th | v5 (v2026.06.15) |
| Jun 15, 2026 | 1.11% (0.01112) | 61.58th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.25% (0.00249) | 46.27th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.23% (0.00232) | 62.20th | v3 (v2023.03.01) |
| Jun 19, 2024 | 0.23% (0.00232) | 61.49th | v3 (v2023.03.01) |
| Apr 23, 2024 | 0.33% (0.00330) | 70.74th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.47% (0.00468) | 74.80th | v3 (v2023.03.01) |
| Sep 3, 2023 | 0.47% (0.00468) | 72.47th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.27% (0.00265) | 62.27th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.11% (0.01108) | 55.18th | v2 (v2022.01.01) |
| Feb 4, 2022 | 1.11% (0.01108) | 29.61th | v2 (v2022.01.01) |
| Feb 3, 2022 | 1.66% (0.01659) | 34.20th | v5 (v2026.06.15) |
| Apr 14, 2021 | 1.66% (0.01659) | 0.00th | v1 |
References (11)
- https://access.redhat.com/errata/RHSA-2018:3527 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3528 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3529 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3595 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2018-14627 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1624664 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627 x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
- https://issues.jboss.org/browse/WFLY-9107 x_refsource_CONFIRMThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-14627
- https://security.netapp.com/advisory/ntap-20181221-0002/ x_refsource_CONFIRM
- https://www.cve.org/CVERecord?id=CVE-2018-14627
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2018:3527 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/errata/RHSA-2018:3528 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/errata/RHSA-2018:3529 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/errata/RHSA-2018:3595 | vendor-advisoryx_refsource_REDHATThird Party Advisory | |
| https://access.redhat.com/security/cve/CVE-2018-14627 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1624664 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14627 | x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory | |
| https://issues.jboss.org/browse/WFLY-9107 | x_refsource_CONFIRMThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2018-14627 | ||
| https://security.netapp.com/advisory/ntap-20181221-0002/ | x_refsource_CONFIRM | |
| https://www.cve.org/CVERecord?id=CVE-2018-14627 |
Change history (0)
No recorded changes yet.