Every CVE Search/ Get API key

CVE-2007-4465

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...

4.3 MediumFix available

CVE-2007-4465 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published September 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.2%, the 97th percentile. Fixed in apache2 2.2.6-1.

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Exploit likelihood

26.2%Up 18.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
CVE-2007-4465
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2007-4448 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
EUVD-2007-4448
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-7286-985c-74qv 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
GHSA-7286-985c-74qv
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
NVD 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
CVE-2007-4465
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVBELL-CVE-2007-4465 6.1

CVE-2007-4465 does not affect BellSoft software

Record
BELL-CVE-2007-4465
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2007-4465 6.1

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
DEBIAN-CVE-2007-4465
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSV No score

Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that this issue is due to a design limitation of browsers that attempt to perform automatic content type detection.

Record
CVE-2007-4465
Updated
2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score

apache2-2.4.49-1.1 on GA media

These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10623-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Debian:12
 before 2.2.6-1
2.2.6-1
apache2
Debian:13
 before 2.2.6-1
2.2.6-1
apache2
Debian:14
 before 2.2.6-1
2.2.6-1
httpd
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-debuginfo
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-devel
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
httpd-manual
Red Hat:rhel_application_stack:1
 before 0:2.0.59-1.el4s1.8
0:2.0.59-1.el4s1.8
mod_ssl
Red Hat:rhel_application_stack:1
 before 1:2.0.59-1.el4s1.8
1:2.0.59-1.el4s1.8
apache
Red Hat:enterprise_linux:2.1::as
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-devel
Red Hat:enterprise_linux:2.1::as
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
Show 144 moreShow less
Affected packages
PackageAffectedFixed
apache-manual
Red Hat:enterprise_linux:2.1::as
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache
Red Hat:enterprise_linux:2.1::aw
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-devel
Red Hat:enterprise_linux:2.1::aw
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-manual
Red Hat:enterprise_linux:2.1::aw
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache
Red Hat:enterprise_linux:2.1::es
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-devel
Red Hat:enterprise_linux:2.1::es
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-manual
Red Hat:enterprise_linux:2.1::es
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache
Red Hat:enterprise_linux:2.1::ws
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-devel
Red Hat:enterprise_linux:2.1::ws
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
apache-manual
Red Hat:enterprise_linux:2.1::ws
 before 0:1.3.27-14.ent
0:1.3.27-14.ent
httpd
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::as
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::as
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::desktop
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::desktop
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::es
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::es
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
httpd-devel
Red Hat:enterprise_linux:3::ws
 before 0:2.0.46-70.ent
0:2.0.46-70.ent
mod_ssl
Red Hat:enterprise_linux:3::ws
 before 1:2.0.46-70.ent
1:2.0.46-70.ent
httpd
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-devel
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-manual
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-suexec
Red Hat:enterprise_linux:4::as
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
mod_ssl
Red Hat:enterprise_linux:4::as
 before 1:2.0.52-38.ent.2
1:2.0.52-38.ent.2
httpd
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-manual
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-suexec
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
mod_ssl
Red Hat:enterprise_linux:4::desktop
 before 1:2.0.52-38.ent.2
1:2.0.52-38.ent.2
httpd
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-devel
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-manual
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-suexec
Red Hat:enterprise_linux:4::es
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
mod_ssl
Red Hat:enterprise_linux:4::es
 before 1:2.0.52-38.ent.2
1:2.0.52-38.ent.2
httpd
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-manual
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
httpd-suexec
Red Hat:enterprise_linux:4::ws
 before 0:2.0.52-38.ent.2
0:2.0.52-38.ent.2
mod_ssl
Red Hat:enterprise_linux:4::ws
 before 1:2.0.52-38.ent.2
1:2.0.52-38.ent.2
httpd
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-manual
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd
Red Hat:enterprise_linux:5::client
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
mod_ssl
Red Hat:enterprise_linux:5::client
 before 1:2.2.3-11.el5_1.3
1:2.2.3-11.el5_1.3
httpd
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-devel
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
httpd-manual
Red Hat:enterprise_linux:5::server
 before 0:2.2.3-11.el5_1.3
0:2.2.3-11.el5_1.3
mod_ssl
Red Hat:enterprise_linux:5::server
 before 1:2.2.3-11.el5_1.3
1:2.2.3-11.el5_1.3
jabberd
Red Hat:network_satellite:5.0:el4
 before 0:2.0s10-3.38.rhn
0:2.0s10-3.38.rhn
java-1.4.2-ibm
Red Hat:network_satellite:5.0:el4
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
java-1.4.2-ibm-devel
Red Hat:network_satellite:5.0:el4
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
jfreechart
Red Hat:network_satellite:5.0:el4
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:5.0:el4
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
openmotif21-debuginfo
Red Hat:network_satellite:5.0:el4
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
perl-Crypt-CBC
Red Hat:network_satellite:5.0:el4
 before 0:2.24-1.el4
0:2.24-1.el4
rhn-apache
Red Hat:network_satellite:5.0:el4
 before 0:1.3.27-36.rhn.rhel4
0:1.3.27-36.rhn.rhel4
rhn-modjk-ap13
Red Hat:network_satellite:5.0:el4
 before 0:1.2.23-2rhn.rhel4
0:1.2.23-2rhn.rhel4
rhn-modperl
Red Hat:network_satellite:5.0:el4
 before 0:1.29-16.rhel4
0:1.29-16.rhel4
rhn-modssl
Red Hat:network_satellite:5.0:el4
 before 0:2.8.12-8.rhn.10.rhel4
0:2.8.12-8.rhn.10.rhel4
tomcat5
Red Hat:network_satellite:5.0:el4
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh
jabberd
Red Hat:network_proxy:4.2::el3
 before 0:2.0s10-3.37.rhn
0:2.0s10-3.37.rhn
rhn-apache
Red Hat:network_proxy:4.2::el3
 before 0:1.3.27-36.rhn.rhel3
0:1.3.27-36.rhn.rhel3
rhn-modperl
Red Hat:network_proxy:4.2::el3
 before 0:1.29-16.rhel3
0:1.29-16.rhel3
jabberd
Red Hat:network_proxy:4.2::el4
 before 0:2.0s10-3.38.rhn
0:2.0s10-3.38.rhn
rhn-apache
Red Hat:network_proxy:4.2::el4
 before 0:1.3.27-36.rhn.rhel4
0:1.3.27-36.rhn.rhel4
rhn-modperl
Red Hat:network_proxy:4.2::el4
 before 0:1.29-16.rhel4
0:1.29-16.rhel4
jabberd
Red Hat:network_satellite:4.2::el3
 before 0:2.0s10-3.37.rhn
0:2.0s10-3.37.rhn
java-1.4.2-ibm
Red Hat:network_satellite:4.2::el3
 before 0:1.4.2.10-1jpp.2.el3
0:1.4.2.10-1jpp.2.el3
java-1.4.2-ibm-devel
Red Hat:network_satellite:4.2::el3
 before 0:1.4.2.10-1jpp.2.el3
0:1.4.2.10-1jpp.2.el3
jfreechart
Red Hat:network_satellite:4.2::el3
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:4.2::el3
 before 0:2.1.30-9.RHEL3.8
0:2.1.30-9.RHEL3.8
openmotif21-debuginfo
Red Hat:network_satellite:4.2::el3
 before 0:2.1.30-9.RHEL3.8
0:2.1.30-9.RHEL3.8
perl-Crypt-CBC
Red Hat:network_satellite:4.2::el3
 before 0:2.24-1.el3
0:2.24-1.el3
rhn-apache
Red Hat:network_satellite:4.2::el3
 before 0:1.3.27-36.rhn.rhel3
0:1.3.27-36.rhn.rhel3
rhn-modjk-ap13
Red Hat:network_satellite:4.2::el3
 before 0:1.2.23-2rhn.rhel3
0:1.2.23-2rhn.rhel3
rhn-modperl
Red Hat:network_satellite:4.2::el3
 before 0:1.29-16.rhel3
0:1.29-16.rhel3
rhn-modssl
Red Hat:network_satellite:4.2::el3
 before 0:2.8.12-8.rhn.10.rhel3
0:2.8.12-8.rhn.10.rhel3
tomcat5
Red Hat:network_satellite:4.2::el3
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh
jabberd
Red Hat:network_satellite:4.2::el4
 before 0:2.0s10-3.38.rhn
0:2.0s10-3.38.rhn
java-1.4.2-ibm
Red Hat:network_satellite:4.2::el4
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
java-1.4.2-ibm-devel
Red Hat:network_satellite:4.2::el4
 before 0:1.4.2.10-1jpp.2.el4
0:1.4.2.10-1jpp.2.el4
jfreechart
Red Hat:network_satellite:4.2::el4
 before 0:0.9.20-3.rhn
0:0.9.20-3.rhn
openmotif21
Red Hat:network_satellite:4.2::el4
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
openmotif21-debuginfo
Red Hat:network_satellite:4.2::el4
 before 0:2.1.30-11.RHEL4.6
0:2.1.30-11.RHEL4.6
perl-Crypt-CBC
Red Hat:network_satellite:4.2::el4
 before 0:2.24-1.el4
0:2.24-1.el4
rhn-apache
Red Hat:network_satellite:4.2::el4
 before 0:1.3.27-36.rhn.rhel4
0:1.3.27-36.rhn.rhel4
rhn-modjk-ap13
Red Hat:network_satellite:4.2::el4
 before 0:1.2.23-2rhn.rhel4
0:1.2.23-2rhn.rhel4
rhn-modperl
Red Hat:network_satellite:4.2::el4
 before 0:1.29-16.rhel4
0:1.29-16.rhel4
rhn-modssl
Red Hat:network_satellite:4.2::el4
 before 0:2.8.12-8.rhn.10.rhel4
0:2.8.12-8.rhn.10.rhel4
tomcat5
Red Hat:network_satellite:4.2::el4
 before 0:5.0.30-0jpp_10rh
0:5.0.30-0jpp_10rh
ant
Red Hat:certificate_system:7.3
 before 0:1.6.5-1jpp_1rh
0:1.6.5-1jpp_1rh
avalon-logkit
Red Hat:certificate_system:7.3
 before 0:1.2-2jpp_4rh
0:1.2-2jpp_4rh
axis
Red Hat:certificate_system:7.3
 before 0:1.2.1-1jpp_3rh
0:1.2.1-1jpp_3rh
classpathx-jaf
Red Hat:certificate_system:7.3
 before 0:1.0-2jpp_6rh
0:1.0-2jpp_6rh
classpathx-mail
Red Hat:certificate_system:7.3
 before 0:1.1.1-2jpp_8rh
0:1.1.1-2jpp_8rh
geronimo-ejb-2.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-1.4-apis
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-connector-1.5-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-deployment-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-j2ee-management-1.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jms-1.1-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-jta-1.0.1B-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
geronimo-specs-javadoc
Red Hat:certificate_system:7.3
 before 0:1.0-0.M4.1jpp_10rh
0:1.0-0.M4.1jpp_10rh
jakarta-commons-modeler
Red Hat:certificate_system:7.3
 before 0:2.0-3jpp_2rh
0:2.0-3jpp_2rh
log4j
Red Hat:certificate_system:7.3
 before 0:1.2.12-1jpp_1rh
0:1.2.12-1jpp_1rh
mx4j
Red Hat:certificate_system:7.3
 before 1:3.0.1-1jpp_4rh
1:3.0.1-1jpp_4rh
pcsc-lite
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-debuginfo
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-doc
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
pcsc-lite-libs
Red Hat:certificate_system:7.3
 before 0:1.3.3-3.el4
0:1.3.3-3.el4
rhpki-ca
Red Hat:certificate_system:7.3
 before 0:7.3.0-20.el4
0:7.3.0-20.el4
rhpki-java-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-10.el4
0:7.3.0-10.el4
rhpki-kra
Red Hat:certificate_system:7.3
 before 0:7.3.0-14.el4
0:7.3.0-14.el4
rhpki-manage
Red Hat:certificate_system:7.3
 before 0:7.3.0-19.el4
0:7.3.0-19.el4
rhpki-native-tools
Red Hat:certificate_system:7.3
 before 0:7.3.0-6.el4
0:7.3.0-6.el4
rhpki-ocsp
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
rhpki-tks
Red Hat:certificate_system:7.3
 before 0:7.3.0-13.el4
0:7.3.0-13.el4
tomcat5
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-common-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jasper
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-jsp-2.0-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-server-lib
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
tomcat5-servlet-2.4-api
Red Hat:certificate_system:7.3
 before 0:5.5.23-0jpp_4rh.16
0:5.5.23-0jpp_4rh.16
xerces-j2
Red Hat:certificate_system:7.3
 before 0:2.7.1-1jpp_1rh
0:2.7.1-1jpp_1rh
xml-commons
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
xml-commons-apis
Red Hat:certificate_system:7.3
 before 0:1.3.02-2jpp_1rh
0:1.3.02-2jpp_1rh
apache2
openSUSE:Tumbleweed
 before 2.4.49-1.1
2.4.49-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 163 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open