VulnerabilityModified

CVE-2015-5220

The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote attackers to cause a denial of service (memory consumption) via a large request header.

MEDIUM 5.0EPSS 2.98%

Does this matter?

Lower severity and a low EPSS score (2.98%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 2.98% probability · 87th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: redhat/jboss enterprise application platform · redhat/jboss wildfly application server
Source: secalert@redhat.com

References

http://rhn.redhat.com/errata/RHSA-2015-1904.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1905.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1906.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1907.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1908.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-1519.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1033859Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1255597Issue Tracking, Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1904.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1905.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1906.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1907.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2015-1908.htmlVendor Advisory
http://rhn.redhat.com/errata/RHSA-2016-1519.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1033859Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1255597Issue Tracking, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.