Every CVE Search/ Get API key

CVE-2009-0027

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...

5.0 MediumFix available

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.

Exploit likelihood

1.80%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.

Record
CVE-2009-0027
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.

Record
CVE-2009-0027
Updated
2026-11-02
EUVDEUVD-2009-0039 No score

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.

Record
EUVD-2009-0039
Updated
2026-11-03
GitHub AdvisoriesGHSA-5xfj-v547-vccj No score

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...

The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.

Record
GHSA-5xfj-v547-vccj
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.2_10-0jpp.ep1.5.ep5.el4
0:1.2_10-0jpp.ep1.5.ep5.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:2.3.0-1jpp.ep1.7.el4
0:2.3.0-1jpp.ep1.7.el4
jakarta-commons-fileupload
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 1:1.1.1-3jpp.ep1.2.el4
1:1.1.1-3jpp.ep1.2.el4
jakarta-commons-io
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.1-0.20051005.2jpp_1rh
0:1.1-0.20051005.2jpp_1rh
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.1-4.ep1.el4
0:1.1-4.ep1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.4.1-6.SP11.1.ep1.el4
0:1.4.1-6.SP11.1.ep1.el4
jboss-jaxr
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.2.0-SP2.0jpp.ep1.3.el4
0:1.2.0-SP2.0jpp.ep1.3.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:2.2.2-3.SP11.0jpp.ep1.1.el4
0:2.2.2-3.SP11.0jpp.ep1.1.el4
Show 101 moreShow less
Affected packages
PackageAffectedFixed
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.2.1-1.ep1.18.el4
0:1.2.1-1.ep1.18.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.2.1-1.ep1.18.el4
0:1.2.1-1.ep1.18.el4
jboss-vfs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.0.0-1.ep1.el4
0:1.0.0-1.ep1.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:4.2.0-4.GA_CP06.3.ep1.el4
0:4.2.0-4.GA_CP06.3.ep1.el4
jbossas-4.2.0.GA_CP06-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:4.2.0-4.GA_CP06.3.ep1.el4
0:4.2.0-4.GA_CP06.3.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:4.2.0-4.GA_CP06.3.ep1.el4
0:4.2.0-4.GA_CP06.3.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:2.0.0-6.CP09.0jpp.ep1.1.el4
0:2.0.0-6.CP09.0jpp.ep1.1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 1:2.4.5-2.ep1.el4
1:2.4.5-2.ep1.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:4.2.0-5.GA_CP06.ep1.3.el4
0:4.2.0-5.GA_CP06.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:4.2.0-5.GA_CP06.ep1.3.el4
0:4.2.0-5.GA_CP06.ep1.3.el4
tanukiwrapper
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:3.2.1-2jpp.ep1.2.el4
0:3.2.1-2jpp.ep1.2.el4
tanukiwrapper-debuginfo
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:3.2.1-2jpp.ep1.2.el4
0:3.2.1-2jpp.ep1.2.el4
ws-commons-policy
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:1.0-2jpp.ep1.7.el4
0:1.0-2jpp.ep1.7.el4
ws-scout0
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:0.7-0.rc2.4.el4
0:0.7-0.rc2.4.el4
xalan-j2
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
 before 0:2.7.0-2jpp.ep1.5.el4
0:2.7.0-2jpp.ep1.5.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.1.4-1.6.ep1.el4
0:2.1.4-1.6.ep1.el4
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.1.4-1.6.ep1.el4
0:2.1.4-1.6.ep1.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.2_10-0jpp.ep1.5.ep5.el4
0:1.2_10-0jpp.ep1.5.ep5.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.3.0-1jpp.ep1.7.el4
0:2.3.0-1jpp.ep1.7.el4
jakarta-commons-fileupload
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 1:1.1.1-3jpp.ep1.2.el4
1:1.1.1-3jpp.ep1.2.el4
jakarta-commons-io
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.1-0.20051005.2jpp_1rh
0:1.1-0.20051005.2jpp_1rh
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.1-4.ep1.el4
0:1.1-4.ep1.el4
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.4.1-6.SP11.1.ep1.el4
0:1.4.1-6.SP11.1.ep1.el4
jboss-jaxr
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.2.0-SP2.0jpp.ep1.3.el4
0:1.2.0-SP2.0jpp.ep1.3.el4
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.4.0-2.SP3_CP07.1.ep1.el4
0:1.4.0-2.SP3_CP07.1.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.2.2-3.SP11.0jpp.ep1.1.el4
0:2.2.2-3.SP11.0jpp.ep1.1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4
jboss-vfs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.0.0-1.ep1.el4
0:1.0.0-1.ep1.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:4.3.0-3.GA_CP04.3.ep1.el4
0:4.3.0-3.GA_CP04.3.ep1.el4
jbossas-4.3.0.GA_CP04-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:4.3.0-3.GA_CP04.3.ep1.el4
0:4.3.0-3.GA_CP04.3.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:4.3.0-3.GA_CP04.3.ep1.el4
0:4.3.0-3.GA_CP04.3.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.0.0-6.CP09.0jpp.ep1.1.el4
0:2.0.0-6.CP09.0jpp.ep1.1.el4
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.0.1-3.SP2_CP05.4.ep1.el4
0:2.0.1-3.SP2_CP05.4.ep1.el4
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.0.0-2.GA_CP03.1.ep1.el4
0:1.0.0-2.GA_CP03.1.ep1.el4
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.0.1-1.GA_CP03.2.ep1.el4
0:2.0.1-1.GA_CP03.2.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 1:2.4.5-2.ep1.el4
1:2.4.5-2.ep1.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:4.3.0-4.GA_CP04.ep1.3.el4
0:4.3.0-4.GA_CP04.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:4.3.0-4.GA_CP04.ep1.3.el4
0:4.3.0-4.GA_CP04.ep1.3.el4
tanukiwrapper
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:3.2.1-2jpp.ep1.2.el4
0:3.2.1-2jpp.ep1.2.el4
tanukiwrapper-debuginfo
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:3.2.1-2jpp.ep1.2.el4
0:3.2.1-2jpp.ep1.2.el4
ws-commons-policy
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:1.0-2jpp.ep1.7.el4
0:1.0-2jpp.ep1.7.el4
ws-scout0
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:0.7-0.rc2.4.el4
0:0.7-0.rc2.4.el4
xalan-j2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
 before 0:2.7.0-2jpp.ep1.5.el4
0:2.7.0-2jpp.ep1.5.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.2_10-0jpp.ep1.5.ep5.el5
0:1.2_10-0jpp.ep1.5.ep5.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:2.3.0-1jpp.ep1.7.1.el5
0:2.3.0-1jpp.ep1.7.1.el5
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.1-4.1.ep1.el5
0:1.1-4.1.ep1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.4.1-6.SP11.1.ep1.el5
0:1.4.1-6.SP11.1.ep1.el5
jboss-jaxr
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.2.0-SP2.0jpp.ep1.3.2.el5
0:1.2.0-SP2.0jpp.ep1.3.2.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:2.2.2-3.SP11.0jpp.ep1.1.el5
0:2.2.2-3.SP11.0jpp.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.2.1-1.ep1.12.el5
0:1.2.1-1.ep1.12.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.2.1-1.ep1.12.el5
0:1.2.1-1.ep1.12.el5
jboss-vfs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.0.0-1.ep1.el5
0:1.0.0-1.ep1.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:4.2.0-4.GA_CP06.3.1.ep1.el5
0:4.2.0-4.GA_CP06.3.1.ep1.el5
jbossas-4.2.0.GA_CP06-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:4.2.0-4.GA_CP06.3.1.ep1.el5
0:4.2.0-4.GA_CP06.3.1.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:4.2.0-4.GA_CP06.3.1.ep1.el5
0:4.2.0-4.GA_CP06.3.1.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:2.0.0-6.CP09.0jpp.ep1.1.el5
0:2.0.0-6.CP09.0jpp.ep1.1.el5
jbossws-jboss42
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.2.1-1.1.ep1.el5
0:1.2.1-1.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 1:2.4.5-2.1.ep1.el5
1:2.4.5-2.1.ep1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:4.2.0-5.GA_CP06.ep1.3.1.el5
0:4.2.0-5.GA_CP06.ep1.3.1.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:4.2.0-5.GA_CP06.ep1.3.1.el5
0:4.2.0-5.GA_CP06.ep1.3.1.el5
tanukiwrapper
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:3.2.1-2jpp.ep1.2.el5
0:3.2.1-2jpp.ep1.2.el5
tanukiwrapper-debuginfo
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:3.2.1-2jpp.ep1.2.el5
0:3.2.1-2jpp.ep1.2.el5
ws-commons-policy
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:1.0-2jpp.ep1.7.el5
0:1.0-2jpp.ep1.7.el5
ws-scout0
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
 before 0:0.7-0.rc2.4.el5
0:0.7-0.rc2.4.el5
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.1.4-1.6.1.ep1.el5
0:2.1.4-1.6.1.ep1.el5
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.1.4-1.6.1.ep1.el5
0:2.1.4-1.6.1.ep1.el5
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.2_10-0jpp.ep1.5.ep5.el5
0:1.2_10-0jpp.ep1.5.ep5.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.3.0-1jpp.ep1.7.1.el5
0:2.3.0-1jpp.ep1.7.1.el5
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.1-4.1.ep1.el5
0:1.1-4.1.ep1.el5
jboss-cache
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.4.1-6.SP11.1.ep1.el5
0:1.4.1-6.SP11.1.ep1.el5
jboss-jaxr
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.2.0-SP2.0jpp.ep1.3.2.el5
0:1.2.0-SP2.0jpp.ep1.3.2.el5
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.4.0-2.SP3_CP07.1.ep1.el5
0:1.4.0-2.SP3_CP07.1.ep1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.2.2-3.SP11.0jpp.ep1.1.el5
0:2.2.2-3.SP11.0jpp.ep1.1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1
jboss-vfs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.0.0-1.ep1.el5
0:1.0.0-1.ep1.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:4.3.0-3.GA_CP04.2.1.ep1.el5
0:4.3.0-3.GA_CP04.2.1.ep1.el5
jbossas-4.3.0.GA_CP04-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:4.3.0-3.GA_CP04.2.1.ep1.el5
0:4.3.0-3.GA_CP04.2.1.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:4.3.0-3.GA_CP04.2.1.ep1.el5
0:4.3.0-3.GA_CP04.2.1.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.0.0-6.CP09.0jpp.ep1.1.el5
0:2.0.0-6.CP09.0jpp.ep1.1.el5
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.0.1-3.SP2_CP05.3.1.ep1.el5
0:2.0.1-3.SP2_CP05.3.1.ep1.el5
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.0.0-2.GA_CP03.1.ep1.el5
0:1.0.0-2.GA_CP03.1.ep1.el5
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:2.0.1-1.GA_CP03.2.ep1.el5
0:2.0.1-1.GA_CP03.2.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 1:2.4.5-2.1.ep1.el5
1:2.4.5-2.1.ep1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:4.3.0-4.GA_CP04.ep1.3.1.el5
0:4.3.0-4.GA_CP04.ep1.3.1.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:4.3.0-4.GA_CP04.ep1.3.1.el5
0:4.3.0-4.GA_CP04.ep1.3.1.el5
tanukiwrapper
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:3.2.1-2jpp.ep1.2.el5
0:3.2.1-2jpp.ep1.2.el5
tanukiwrapper-debuginfo
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:3.2.1-2jpp.ep1.2.el5
0:3.2.1-2jpp.ep1.2.el5
ws-commons-policy
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:1.0-2jpp.ep1.7.el5
0:1.0-2jpp.ep1.7.el5
ws-scout0
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
 before 0:0.7-0.rc2.4.el5
0:0.7-0.rc2.4.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-0027 is a medium vulnerability (CVSS 5.0) in Redhat Jboss Enterprise Application Platform, published March 9, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in glassfish-jsf 0:1.2_10-0jpp.ep1.5.ep5.el4.

References

Show 22 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open