VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 9, 2020· Updated Jun 17, 2026

CVE-2020-14384

CVE-2020-14384

Description

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Red Hat/Jboss Enterprise Application Platform
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*
  • Red Hat/JBossWeb2 versions
    cpe:2.3:a:redhat:jbossweb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:jbossweb:*:*:*:*:*:*:*:*range: <7.5.31.final-redhat-3
    • (no CPE)range: <7.5.31.Final-redhat-3
  • JBossWeb/JBossWebdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.