[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2020-25689":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":24,"technologies":98,"references":109,"score":114,"epss_score":115,"epss_percentile":116,"is_kev":117,"cisa_kev_date_added":118,"cisa_kev_due_date":118,"cisa_ssvc":119,"attack_mappings":125,"exploits":141},257901,"CVE-2020-25689","EUVD-2022-3316","Uncontrolled Resource Consumption in WildFly\n\nA memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.","2022-05-24T17:32:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",6.5,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",true,[22,23],"CWE-401","CWE-400",[25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97],"cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:11.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:17.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:13.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:11.0.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:11.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:20.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:cr2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:12.0.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.1.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_data_grid:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","cpe:2.3:a:redhat:wildfly:10.1.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:13.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.1.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:20.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.1.0:cr1:*:*:*:*:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:alpha4:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:18.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:7.2.5:cr2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:cr2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:17.0.0:beta2:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.1.0:cr2:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*","cpe:2.3:a:redhat:wildfly:19.1.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:7.2.3:general_availability:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.2.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:18.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:7.2.0:general_availability:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.1.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:19.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:17.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.0.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:15.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:8.2.0:*:*:*:*:*:*:*","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:11.0.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:15.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:beta1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:21.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:14.0.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:cr5:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:cr1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:11.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:fuse:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:12.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:16.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:17.0.0:-:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:9.0.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:10.0.0:cr3:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:16.0.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:wildfly:16.0.0:beta1:*:*:*:*:*:*",[99,100,101,102,103,104,105,106,107,108],"Redhat Jboss Data Grid","Netapp Oncommand Insight","Redhat Fuse","Netapp Service Level Manager","Redhat Jboss Fuse","Redhat Jboss Enterprise Application Platform","Redhat Wildfly","Redhat Single Sign-On","Redhat Openshift Application Runtimes","Netapp Active Iq Unified Manager",[110,111,112,113],"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2020-25689","https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20201123-0006\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2020-25689","https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20201123-0006",0.68,0.01487,0.73888,false,null,{"timestamp":118,"automatable":120,"tech_impact":121,"exploitation":122,"cisa_decision":123,"cisa_remediation_timeline":124},"no","partial","none",{},"FSU",[126,132],{"name":127,"source":128,"tactics":129,"technique_id":131},"Exploit Public-Facing Application","attack_vector",[130],"initial-access","T1190",{"name":133,"source":134,"cwe_ids":135,"tactics":136,"capec_ids":138,"technique_id":140},"Endpoint Denial of Service","capec",[23],[137],"impact",[139],"CAPEC-227","T1499",[142],{"link":110}]