CVE-2021-3503

4.3 mediumEPSS 1.1%

Medium (4.3) in redhat wildfly. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in org.wildfly:wildfly-metrics 23.0.1.Final.

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat from this vulnerability is to the confidentiality.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2022-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:wildfly

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-c4r5-xvgw-2942	Maven	org.wildfly:wildfly-metrics	<23.0.1.Final	23.0.1.Final

References

https://access.redhat.com/security/cve/CVE-2021-3503
https://bugzilla.redhat.com/show_bug.cgi?id=1942693
https://github.com/advisories/GHSA-c4r5-xvgw-2942
https://github.com/wildfly/wildfly/pull/14136
https://issues.redhat.com/browse/WFLY-11933

Check your stack JSON