CVE-2009-0217
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
5.0 MediumFix available
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
Exploit likelihood
6.36%Down 4.1 points since Feb 4, 2022
What each source reports
NVD Score used
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- Updated
- 2026-11-02
EUVDEUVD-2022-3187 No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
EUVD-2022-3187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hfm-837h-hjg5 No score
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in multiple products.
The Apache XML Security (Java) is affected by the vulnerability published in US-Cert VU #466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow an attacker to bypass authentication by inserting/modifying a small HMAC truncation length parameter in the XML Signature HMAC based SignatureMethod algorithms.
An inexhaustive list of additional affected products includes:
- the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM;
- the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6;
- Mono before 2.4.2.2;
- XML Security Library before 1.2.12;
- IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1;
- Sun JDK and JRE Update 14 and earlier;
- Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
GHSA-8hfm-837h-hjg5- Updated
- 2026-11-02
OSV No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0217 No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
DEBIAN-CVE-2009-0217- Updated
- 2026-11-02
OSVGHSA-8hfm-837h-hjg5 No score
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in multiple products.
The Apache XML Security (Java) is affected by the vulnerability published in US-Cert VU #466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow an attacker to bypass authentication by inserting/modifying a small HMAC truncation length parameter in the XML Signature HMAC based SignatureMethod algorithms.
An inexhaustive list of additional affected products includes:
- the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM;
- the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6;
- Mono before 2.4.2.2;
- XML Security Library before 1.2.12;
- IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1;
- Sun JDK and JRE Update 14 and earlier;
- Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
GHSA-8hfm-837h-hjg5- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.santuario:xmlsecMaven |
1.4.0 up to 1.4.3 | 1.4.3 |
monoDebian:12 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
monoDebian:13 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
monoDebian:14 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
xml-security-cDebian:12 |
before 1.4.0-4 | 1.4.0-4 |
xml-security-cDebian:13 |
before 1.4.0-4 | 1.4.0-4 |
xml-security-cDebian:14 |
before 1.4.0-4 | 1.4.0-4 |
xmlsec1Debian:12 |
before 1.2.12-1 | 1.2.12-1 |
xmlsec1Debian:13 |
before 1.2.12-1 | 1.2.12-1 |
xmlsec1Debian:14 |
before 1.2.12-1 | 1.2.12-1 |
Show 227 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xml-security-cDebian:4.0 |
before 1.2.1-3+etch1, plus listed versions 1.2.1-3 |
1.2.1-3+etch1 |
xml-security-cDebian:5.0 |
before 1.4.0-3+lenny2, plus listed versions 1.4.0-3 |
1.4.0-3+lenny2 |
openoffice.orgDebian:4.0 From an advisory covering 6 CVEs |
before 2.0.4.dfsg.2-7etch9, plus listed versions 2.0.4.dfsg.2-5etch12.0.4.dfsg.2-5etch22.0.4.dfsg.2-62.0.4.dfsg.2-72.0.4.dfsg.2-7etch1 Show 6 moreShow less2.0.4.dfsg.2-7etch22.0.4.dfsg.2-7etch42.0.4.dfsg.2-7etch52.0.4.dfsg.2-7etch62.0.4.dfsg.2-7etch72.0.4.dfsg.2-7etch8 |
2.0.4.dfsg.2-7etch9 |
openoffice.orgDebian:5.0 From an advisory covering 6 CVEs |
before 1:2.4.1+dfsg-1+lenny6, plus listed versions 1:2.4.1+dfsg-11:2.4.1+dfsg-1+lenny11:2.4.1+dfsg-1+lenny31:2.4.1+dfsg-1+lenny41:2.4.1+dfsg-1+lenny51:2.4.1-17 |
1:2.4.1+dfsg-1+lenny6 |
openoffice.orgDebian:6.0 From an advisory covering 5 CVEs |
before 1:3.1.1-15+squeeze1 | 1:3.1.1-15+squeeze1 |
org.apache.santuario:xmlsecMaven |
1.4.0 up to 1.4.3, plus listed versions 1.4.11.4.2 |
1.4.3 |
java-1.6.0-sunRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server From an advisory covering 12 CVEs |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
xmlsec1Red Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutls-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1Red Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutlsRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nssRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-opensslRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1Red Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutlsRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutls-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nssRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nss-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-opensslRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.0-3.SP3_CP09.4.ep1.el4 | 0:1.4.0-3.SP3_CP09.4.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.0-2.GA_CP05.1.ep1.el4 | 0:1.0.0-2.GA_CP05.1.ep1.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-1.GA_CP05.1.ep1.el4 | 0:2.0.1-1.GA_CP05.1.ep1.el4 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.4.0-3.SP3_CP09.4.ep1.el5 | 0:1.4.0-3.SP3_CP09.4.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.0-2.GA_CP05.1.ep1.el5 | 0:1.0.0-2.GA_CP05.1.ep1.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-1.GA_CP05.1.ep1.el5 | 0:2.0.1-1.GA_CP05.1.ep1.el5 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 5 CVEs |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 From an advisory covering 35 CVEs |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0217 is a medium vulnerability (CVSS 5.0) in Ibm Websphere Application Server, published July 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.36%, the 93rd percentile. Fixed in org.apache.santuario:xmlsec 1.4.3.
References
rhn.redhat.com/errata/RHSA-2009-1428.html
vupen.com/english/advisories/2009/3122
openoffice.org/security/cves/CVE-2009-0217.html
issues.apache.org/bugzilla/show_bug.cgi?id=47526
secunia.com/advisories/60799
gentoo.org/security/en/glsa/glsa-201408-19.xml
Show 194 moreShow less
www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere
sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1
debian.org/security/2010/dsa-1995
marc.info?l=bugtraq&m=125787273209737&w=2
redhat.com/support/errata/RHSA-2009-1694.html
kb.cert.org/vuls/id/WDON-7TY529
mono-project.com/Vulnerabilities
ubuntu.com/usn/USN-903-1
securityfocus.com/bid/35671
osvdb.org/55907
mandriva.com/security/advisories?name=MDVSA-2009:209
lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161
securitytracker.com/id?1022561
oracle.com/technetwork/topics/security/cpuoct2010-175626.html
us-cert.gov/cas/techalerts/TA09-294A.html
svn.apache.org/viewvc?revision=794013&view=revision
w3.org/2008/06/xmldsigcore-errata.html
usn.ubuntu.com/826-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158
git.gnome.org/cgit/xmlsec/commit?id=34b349675af9f72eb822837a8772cc1ead7115c7
lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
aleksey.com/xmlsec
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041
bugzilla.redhat.com/show_bug.cgi?id=511915
nvd.nist.gov/vuln/detail/CVE-2009-0217
gitlab.gnome.org/Archive/xmlsec/-/commit/34b349675af9f72eb822837a8772cc1ead7115c7
github.com/advisories/GHSA-8hfm-837h-hjg5
security-tracker.debian.org/tracker/CVE-2009-0217
access.redhat.com/errata/RHSA-2009:1200
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1200.json
cve.org/CVERecord?id=CVE-2009-0217
tools.ietf.org/html/rfc2104
ibm.com/developerworks/java/jdk/alerts
This page doesn't list everything
Left out here: 104 references. The JSON record has them.