Every CVE Search/ Get API key

CVE-2024-47554

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

4.3 MediumFix available

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

1.31%Up 1.3 points since Oct 4, 2024
90%50%10%1%

What each source reports

CVE List Score used 4.3

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
CVE-2024-47554
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2024-2976 4.3

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
EUVD-2024-2976
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-78wr-2p64-hpwj 8.7

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
GHSA-78wr-2p64-hpwj
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
NVD 4.3

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
CVE-2024-47554
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
OSV 4.3

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
CVE-2024-47554
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
OSVDEBIAN-CVE-2024-47554 4.3

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
DEBIAN-CVE-2024-47554
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 37 moreShow less
OSVGHSA-78wr-2p64-hpwj 8.7

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
GHSA-78wr-2p64-hpwj
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVOESA-2024-2558 4.3

apache-commons-io security update

Apache commons IO library is used for developing IO functionality. It contains a collecton of utilities with utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Security Fix(es):

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.(CVE-2024-47554)

Record
OESA-2024-2558
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHLW-2026-4aa7ebdfd0b8c810 4.3

Lightwell Security Advisory: commons-io 2.8.0.rhlw-00002

Red Hat Lightwell has released commons-io:commons-io 2.8.0.rhlw-00002 with a backported security fix.

CVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

This patched artifact is a drop-in replacement for commons-io:commons-io 2.8.0 from Maven Central.

Record
RHLW-2026-4aa7ebdfd0b8c810
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHLW-2026-a317ddba4af7590d 4.3

Lightwell Security Advisory: commons-io 2.11.0.rhlw-00009

Red Hat Lightwell has released commons-io:commons-io 2.11.0.rhlw-00009 with a backported security fix.

CVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

This patched artifact is a drop-in replacement for commons-io:commons-io 2.11.0 from Maven Central.

Record
RHLW-2026-a317ddba4af7590d
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHLW-2026-f33a833f49f3fd86 4.8

Lightwell Security Advisory: commons-io 2.2.0.rhlw-00004

Red Hat Lightwell has released commons-io:commons-io 2.2.0.rhlw-00004 with backported fixes for CVE-2021-29425 and CVE-2024-47554.

CVE-2021-29425: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.

CVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

This patched artifact is a drop-in replacement for commons-io:commons-io 2.2.0 from Maven Central.

Record
RHLW-2026-f33a833f49f3fd86
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHLW-2026-f8fc2683e717e6a2 4.3

Lightwell Security Advisory: commons-io 2.13.0.rhlw-00007

Red Hat Lightwell has released commons-io:commons-io 2.13.0.rhlw-00007 with a backported security fix.

CVE-2024-47554: Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

This patched artifact is a drop-in replacement for commons-io:commons-io 2.13.0 from Maven Central.

Record
RHLW-2026-f8fc2683e717e6a2
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRHSA-2024:8823 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8823
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8824 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8824
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:4548 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update

Record
RHSA-2025:4548
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:4549 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update

Record
RHSA-2025:4549
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:4550 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update

Record
RHSA-2025:4550
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-MAVEN-CVE-2024-47554 7.5

CVE-2024-47554 in io.root.commons-io:commons-io - Patched by Root

Root has patched CVE-2024-47554 in the io.root.commons-io:commons-io package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-CVE-2024-47554
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-47554 4.3

Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
UBUNTU-CVE-2024-47554
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-50019 No score

CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
AZL-50019
Updated
2026-11-02
OSVAZL-50031 No score

CVE-2024-47554 affecting package apache-commons-io for versions less than 2.14.0-1

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input.

This issue affects Apache Commons IO: from 2.0 before 2.14.0.

Users are recommended to upgrade to version 2.14.0 or later, which fixes the issue.

Record
AZL-50031
Updated
2026-11-02
OSVCLSA-2025-1759795577 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.7-tuxcare.1.

Record
CLSA-2025-1759795577
Updated
2026-11-02
OSVCLSA-2025-1764634061 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.5-tuxcare.1.

Record
CLSA-2025-1764634061
Updated
2026-11-02
OSVCLSA-2026-1776126821 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.11.0-tuxcare.1.

Record
CLSA-2026-1776126821
Updated
2026-11-02
OSVCLSA-2026-1778028242 No score

TuxCare security update for com.squareup.retrofit2 (3 CVEs)

TuxCare rebuilt 5 com.squareup.retrofit2 packages to address 3 CVEs. Fixed in 2.9.0-tuxcare.1.

Record
CLSA-2026-1778028242
Updated
2026-11-02
OSVCLSA-2026-1778633126 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.6-tuxcare.1.

Record
CLSA-2026-1778633126
Updated
2026-11-02
OSVCLSA-2026-1779670106 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.4-tuxcare.1.

Record
CLSA-2026-1779670106
Updated
2026-11-02
OSVCLSA-2026-1780274964 No score

TuxCare security update for commons-digester:commons-digester (4 CVEs)

TuxCare rebuilt commons-digester:commons-digester to address 4 CVEs. Fixed in 2.1-tuxcare.1.

Record
CLSA-2026-1780274964
Updated
2026-11-02
OSVCLSA-2026-1784250510 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.8.0-tuxcare.1.

Record
CLSA-2026-1784250510
Updated
2026-11-02
OSVCLSA-2026-1786518146 No score

TuxCare security update for commons-io:commons-io (2 CVEs)

TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.2-tuxcare.1.

Record
CLSA-2026-1786518146
Updated
2026-11-02
OSVCLSA-2026-1788210245 No score

TuxCare security update for 21 packages (1 CVE)

TuxCare rebuilt 21 packages to address 1 CVE. Fixed in 2.5-tuxcare.1.

Record
CLSA-2026-1788210245
Updated
2026-11-02
OSVCLSA-2026-1788215347 No score

TuxCare security update for org.apache.logging.log4j (7 CVEs)

TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1.

Record
CLSA-2026-1788215347
Updated
2026-11-02
OSVCLSA-2026-1788757840 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.0.1-tuxcare.1.

Record
CLSA-2026-1788757840
Updated
2026-11-02
OSVCLSA-2026-1788766641 No score

TuxCare security update for com.jayway.jsonpath (3 CVEs)

TuxCare rebuilt 2 com.jayway.jsonpath packages to address 3 CVEs. Fixed in 2.9.0-tuxcare.1.

Record
CLSA-2026-1788766641
Updated
2026-11-02
OSVCLSA-2026-1789366696 No score

TuxCare security update for org.apache.commons:commons-configuration2 (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 2 CVEs. Fixed in 2.8.0-tuxcare.1.

Record
CLSA-2026-1789366696
Updated
2026-11-02
OSVCLSA-2026-1789374590 No score

TuxCare security update for commons-io:commons-io (2 CVEs)

TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.1-tuxcare.1.

Record
CLSA-2026-1789374590
Updated
2026-11-02
OSVCLSA-2026-1789374806 No score

TuxCare security update for commons-io:commons-io (2 CVEs)

TuxCare rebuilt commons-io:commons-io to address 2 CVEs. Fixed in 2.3-tuxcare.1.

Record
CLSA-2026-1789374806
Updated
2026-11-02
OSVCLSA-2026-1789374817 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.9.0-tuxcare.1.

Record
CLSA-2026-1789374817
Updated
2026-11-02
OSVCLSA-2026-1789374823 No score

TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.10.0-tuxcare.1.

Record
CLSA-2026-1789374823
Updated
2026-11-02
OSVopenSUSE-SU-2024:14387-1 No score

apache-commons-io-2.17.0-2.1 on GA media

These are all security issues fixed in the apache-commons-io-2.17.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14387-1
Updated
2026-11-02
OSVSUSE-RU-2025:1150-1 No score

Recommended update for apache-commons-io

This update for apache-commons-io fixes the following issues:

apache-commons-io was updated from version 2.15.1 to 2.18.0:

  • Key changes across versions:

    • Cleaner code and updated dependencies
    • Improved security when handling serialized data with the new safe deserialization feature
    • New features for advanced file and stream operations
    • Various bugs were fixed to improve reliability with fewer crashes and unexpected errors
    • For the full list of changes please consult the packaged RELEASE-NOTES.txt

  • Already fixed in previous version:

    • CVE-2024-47554: Untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298)
Record
SUSE-RU-2025:1150-1
Updated
2026-11-02
OSVSUSE-SU-2024:3596-1 No score

Security update for apache-commons-io

This update for apache-commons-io fixes the following issues:

Upgrade to 2.17.0:

  • CVE-2024-47554: Fixed untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298)

Other changes:

Record
SUSE-SU-2024:3596-1
Updated
2026-11-02
OSVUSN-8191-1 No score

commons-io vulnerability

It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue to cause Apache Commons IO to crash, resulting in a denial of service.

Record
USN-8191-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
commons-io:commons-io
Maven
 2.0 up to 2.14.0
2.14.0
apache-commons-io
Azure Linux:2
 before 2.14.0-1
2.14.0-1
apache-commons-io
Azure Linux:3
 before 2.14.0-1
2.14.0-1
commons-io:commons-io
TuxCare:Maven
 2.7 up to 2.7-tuxcare.1
2.7-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.5 up to 2.5-tuxcare.1
2.5-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.11.0 up to 2.11.0-tuxcare.1
2.11.0-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.6 up to 2.6-tuxcare.1
2.6-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.4 up to 2.4-tuxcare.1
2.4-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.8.0 up to 2.8.0-tuxcare.1
2.8.0-tuxcare.1
commons-io:commons-io
TuxCare:Maven
From an advisory covering 2 CVEs
 2.2 up to 2.2-tuxcare.1
2.2-tuxcare.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
commons-io:commons-io
TuxCare:Maven
 2.0.1 up to 2.0.1-tuxcare.1
2.0.1-tuxcare.1
commons-io:commons-io
TuxCare:Maven
From an advisory covering 2 CVEs
 2.1 up to 2.1-tuxcare.1
2.1-tuxcare.1
commons-io:commons-io
TuxCare:Maven
From an advisory covering 2 CVEs
 2.3 up to 2.3-tuxcare.1
2.3-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.9.0 up to 2.9.0-tuxcare.1
2.9.0-tuxcare.1
commons-io:commons-io
TuxCare:Maven
 2.10.0 up to 2.10.0-tuxcare.1
2.10.0-tuxcare.1
commons-io
Debian:12
 All versions, plus listed versions
2.11.0-22.15.1-12.16.0-12.16.1-12.17.0-12.18.0-12.19.0-12.22.0-1
 None known
commons-io
Debian:13
 before 2.16.0-1
2.16.0-1
commons-io
Debian:14
 before 2.16.0-1
2.16.0-1
commons-io:commons-io
Maven
 2.0 up to 2.14.0, plus listed versions
2.0.12.12.10.02.11.02.12.0
Show 9 moreShow less
2.13.02.22.32.42.52.62.72.8.02.9.0
2.14.0
apache-commons-io
openEuler:24.03-LTS
 before 2.15.1-1.oe2403
2.15.1-1.oe2403
commons-io:commons-io
Red Hat Lightwell:Maven
 2.8.0 up to 2.8.0.rhlw-00002
2.8.0.rhlw-00002
commons-io:commons-io
Red Hat Lightwell:Maven
 2.11.0 up to 2.11.0.rhlw-00009
2.11.0.rhlw-00009
commons-io:commons-io
Red Hat Lightwell:Maven
From an advisory covering 2 CVEs
 before 2.2.0.rhlw-00004, plus listed versions
0.11.01.11.21.3
Show 8 moreShow less
1.3.11.3.21.42.02.0.12.12.22.2.0
2.2.0.rhlw-00004
commons-io:commons-io
Red Hat Lightwell:Maven
 2.13.0 up to 2.13.0.rhlw-00007
2.13.0.rhlw-00007
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el8eap
0:1.8.0-2.redhat_00001.1.el8eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el8eap
0:2.2.0-2.redhat_00001.1.el8eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el8eap
0:1.16.1-2.redhat_00007.1.el8eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el8eap
0:3.2.2-28.redhat_2.1.el8eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el8eap
0:2.15.1-1.redhat_00001.1.el8eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el8eap
0:3.14.0-2.redhat_00006.1.el8eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el8eap
0:2.0.1-1.redhat_00002.1.el8eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el8eap
0:0.1.0-2.redhat_00010.1.el8eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el8eap
0:1.2.5-2.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el8eap
0:2.1.0-4.redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el8eap
0:0.8.1-2.redhat_00001.1.el8eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el8eap
0:3.5.3-1.Final_redhat_00001.1.el8eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el8eap
0:5.3.10-1.Final_redhat_00001.1.el8eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el8eap
0:2.22.1-1.redhat_00002.1.el8eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el8eap
0:9.37.3-1.redhat_00001.1.el8eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el8eap
0:2.3.0-1.redhat_00001.1.el8eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el8eap
0:3.0.1-2.Final_redhat_00001.1.el8eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el8eap
0:3.0.4-1.redhat_00001.1.el8eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el8eap
0:8.0.0-6.redhat_00001.1.el8eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el8eap
0:2.2.0-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el9eap
0:1.8.0-2.redhat_00001.1.el9eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el9eap
0:2.2.0-2.redhat_00001.1.el9eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el9eap
0:1.16.1-2.redhat_00007.1.el9eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el9eap
0:3.2.2-28.redhat_2.1.el9eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el9eap
0:2.15.1-1.redhat_00001.1.el9eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el9eap
0:3.14.0-2.redhat_00006.1.el9eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el9eap
0:2.0.1-1.redhat_00002.1.el9eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el9eap
0:0.1.0-2.redhat_00010.1.el9eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el9eap
0:1.2.5-2.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el9eap
0:2.1.0-4.redhat_00001.1.el9eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el9eap
0:0.8.1-2.redhat_00001.1.el9eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el9eap
0:3.5.3-1.Final_redhat_00001.1.el9eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el9eap
0:5.3.10-1.Final_redhat_00001.1.el9eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el9eap
0:2.22.1-1.redhat_00002.1.el9eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el9eap
0:9.37.3-1.redhat_00001.1.el9eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el9eap
0:2.3.0-1.redhat_00001.1.el9eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el9eap
0:3.0.1-2.Final_redhat_00001.1.el9eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el9eap
0:3.0.4-1.redhat_00001.1.el9eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el9eap
0:8.0.0-6.redhat_00001.1.el9eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el9eap
0:2.2.0-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap7-apache-commons-io
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:2.16.1-1.redhat_00001.1.el7eap
0:2.16.1-1.redhat_00001.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.3.26-1.Final_redhat_00001.1.el7eap
0:3.3.26-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el7eap
0:1.5.19-1.Final_redhat_00001.1.el7eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:5.0.31-1.Final_redhat_00001.1.el7eap
0:5.0.31-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el7eap
0:1.10.0-41.Final_redhat_00041.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el7eap
0:1.10.0-41.Final_redhat_00041.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el7eap
0:1.10.0-41.Final_redhat_00041.1.el7eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el7eap
0:3.1.11-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el7eap
0:7.4.22-2.GA_redhat_00001.1.el7eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el7eap
0:1.15.25-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el7eap
0:1.15.25-1.Final_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el7eap
0:7.4.22-2.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el7eap
0:7.4.22-2.GA_redhat_00001.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el7eap
0:7.4.22-2.GA_redhat_00001.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el7eap
0:7.4.22-2.GA_redhat_00001.1.el7eap
eap7-apache-commons-io
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:2.16.1-1.redhat_00001.1.el8eap
0:2.16.1-1.redhat_00001.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.3.26-1.Final_redhat_00001.1.el8eap
0:3.3.26-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el8eap
0:1.5.19-1.Final_redhat_00001.1.el8eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:5.0.31-1.Final_redhat_00001.1.el8eap
0:5.0.31-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el8eap
0:1.10.0-41.Final_redhat_00041.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el8eap
0:1.10.0-41.Final_redhat_00041.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el8eap
0:1.10.0-41.Final_redhat_00041.1.el8eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el8eap
0:3.1.11-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el8eap
0:1.15.25-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el8eap
0:1.15.25-1.Final_redhat_00001.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el8eap
0:7.4.22-2.GA_redhat_00001.1.el8eap
eap7-apache-commons-io
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:2.16.1-1.redhat_00001.1.el9eap
0:2.16.1-1.redhat_00001.1.el9eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.3.26-1.Final_redhat_00001.1.el9eap
0:3.3.26-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.5.19-1.Final_redhat_00001.1.el9eap
0:1.5.19-1.Final_redhat_00001.1.el9eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:5.0.31-1.Final_redhat_00001.1.el9eap
0:5.0.31-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el9eap
0:1.10.0-41.Final_redhat_00041.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el9eap
0:1.10.0-41.Final_redhat_00041.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.10.0-41.Final_redhat_00041.1.el9eap
0:1.10.0-41.Final_redhat_00041.1.el9eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:3.1.11-1.Final_redhat_00001.1.el9eap
0:3.1.11-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el9eap
0:7.4.22-2.GA_redhat_00001.1.el9eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el9eap
0:1.15.25-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:1.15.25-1.Final_redhat_00001.1.el9eap
0:1.15.25-1.Final_redhat_00001.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el9eap
0:7.4.22-2.GA_redhat_00001.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el9eap
0:7.4.22-2.GA_redhat_00001.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el9eap
0:7.4.22-2.GA_redhat_00001.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 4 CVEs
 before 0:7.4.22-2.GA_redhat_00001.1.el9eap
0:7.4.22-2.GA_redhat_00001.1.el9eap
io.root.commons-io:commons-io
Root:Maven
 before 2.6-root.io.1
2.6-root.io.12.5-root.io.12.11.0-root.io.12.5-root.io.22.11.0-root.io.22.6-root.io.2
commons-io:commons-io
Root:Maven
 before 2.5-aikido.2
2.5-aikido.22.11.0-aikido.22.6-aikido.2
apache-commons-io
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Manager Proxy 4.3
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Manager Server 4.3
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Enterprise Storage 7.1
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
openSUSE:Leap 15.6
 before 2.18.0-150200.3.15.1
2.18.0-150200.3.15.1
apache-commons-io
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 2.17.0-11.3.1
2.17.0-11.3.1
apache-commons-io
SUSE:Linux Enterprise Server 12 SP5
 before 2.17.0-11.3.1
2.17.0-11.3.1
apache-commons-io
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.17.0-11.3.1
2.17.0-11.3.1
commons-io
Ubuntu:Pro:14.04:LTS
 before 2.4-2ubuntu0.1~esm2, plus listed versions
2.4-22.4-2ubuntu0.1~esm1
2.4-2ubuntu0.1~esm2
commons-io
Ubuntu:Pro:16.04:LTS
 before 2.4-2ubuntu0.16.04.1~esm1, plus listed versions
2.4-2
2.4-2ubuntu0.16.04.1~esm1
commons-io
Ubuntu:Pro:18.04:LTS
 before 2.6-2ubuntu0.18.04.1+esm1, plus listed versions
2.5-12.5-22.6-12.6-22.6-2ubuntu0.18.04.1
2.6-2ubuntu0.18.04.1+esm1
commons-io
Ubuntu:Pro:20.04:LTS
 before 2.6-2ubuntu0.20.04.1+esm1, plus listed versions
2.6-22.6-2ubuntu0.20.04.1
2.6-2ubuntu0.20.04.1+esm1
commons-io
Ubuntu:Pro:22.04:LTS
 before 2.11.0-2ubuntu0.22.04.1~esm1, plus listed versions
2.8.0-12.11.0-12.11.0-2
2.11.0-2ubuntu0.22.04.1~esm1
commons-io
Ubuntu:Pro:24.04:LTS
 before 2.11.0-2ubuntu0.24.04.1~esm1, plus listed versions
2.11.0-2
2.11.0-2ubuntu0.24.04.1~esm1
apache-commons-io
openSUSE:Tumbleweed
 before 2.17.0-2.1
2.17.0-2.1

History

History
RecordedChangedSources
affected, facts
affected
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-47554 is a medium vulnerability (CVSS 4.3) in Apache Commons Io, published October 3, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. Fixed in commons-io:commons-io 2.14.0.

References

Show 150 moreShow less
This page doesn't list everything

Left out here: 1 package row. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open