CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Java. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2020-14307
Severity
MEDIUM
CVSS
6.5
EPSS
1.20%
Java
Original NVD Description
A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a response is received in the EJB Client, as well as the server. This flaw allows an attacker to craft a denial of service attack to make the service unavailable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)