CVE-2020-10740

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Jun 22, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-107426.0A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a r CVE-2020-107434.3It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to interc CVE-2020-107445.0An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become CVE-2020-107457.5A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This fl CVE-2020-107466.1A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both RES CVE-2020-107486.1A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw CVE-2020-107496.0A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernete CVE-2020-10755.5An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who succes CVE-2020-107505.5Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store CVE-2020-107516.1A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would onl CVE-2020-107527.5A flaw was found in the OpenShift API Server, where it failed to sufficiently protect OAuthTokens by leaking them into the logs when an API CVE-2020-107536.5A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers vi