CVE-2009-0783
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
4.2
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
- Record
CVE-2009-0783- CVSS 3.0
- 4.2 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
- Record
CVE-2009-0783- Updated
- 2026-11-02
EUVDEUVD-2022-4157 No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
- Record
EUVD-2022-4157- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hhjg-g8xq-hhr3
4.2
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
- Record
GHSA-hhjg-g8xq-hhr3- CVSS 3.0
- 4.2 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-hhjg-g8xq-hhr3
4.2
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the (1) web.xml, (2) context.xml, or (3) tld files of arbitrary web applications via a crafted application that is loaded earlier than the target application.
- Record
GHSA-hhjg-g8xq-hhr3- CVSS 3.0
- 4.2 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
4.1.0 to 4.1.39 | None known |
org.apache.tomcat:tomcatMaven |
5.5.0 to 5.5.27 | None known |
org.apache.tomcat:tomcatMaven |
6.0.0 to 6.0.18 | 6.0.20 |
tomcat5.5Debian:5.0 From an advisory covering 9 CVEs |
before 5.5.26-5lenny2, plus listed versions 5.5.26-5 |
5.5.26-5lenny2 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.20 | 6.0.20 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
Show 205 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el5 | 0:2.1-9.2.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el5 | 0:1.4.1-6.SP13.1.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el5 | 0:2.2.3-2.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.13.el5 | 0:1.2.1-1.ep1.13.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.13.el5 | 0:1.2.1-1.ep1.13.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbossas-4.2.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el5 | 0:2.0.0-6.CP11.0jpp.ep1.1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el5 | 1:2.4.6-1.ep1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.1.el5 | 0:4.2.0-5.GA_CP07.ep1.1.1.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.1.el5 | 0:4.2.0-5.GA_CP07.ep1.1.1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 | 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el4 | 0:2.1-9.2.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el4 | 0:1.4.1-6.SP13.1.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el4 | 0:2.2.3-2.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.19.el4 | 0:1.2.1-1.ep1.19.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.19.el4 | 0:1.2.1-1.ep1.19.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbossas-4.2.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el4 | 0:2.0.0-6.CP11.0jpp.ep1.1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el4 | 1:2.4.6-1.ep1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.el4 | 0:4.2.0-5.GA_CP07.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.el4 | 0:4.2.0-5.GA_CP07.ep1.1.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.7.1-9jpp.ep1.2.el4 | 0:2.7.1-9jpp.ep1.2.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.1.ep1.el5 | 0:2.1.4-1.11.1.ep1.el5 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.1.ep1.el5 | 0:2.1.4-1.11.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el5 | 0:2.1-9.2.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el5 | 0:1.4.1-6.SP13.1.ep1.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.0-2.SP3_CP08.1.ep1.el5 | 0:1.4.0-2.SP3_CP08.1.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el5 | 0:2.2.3-2.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbossas-4.3.0.GA_CP05-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el5 | 0:2.0.0-6.CP11.0jpp.ep1.1.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 | 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.0.0-2.GA_CP04.1.ep1.el5 | 0:1.0.0-2.GA_CP04.1.ep1.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-1.GA_CP04.2.ep1.el5 | 0:2.0.1-1.GA_CP04.2.ep1.el5 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 | 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.0.0-1.GA_CP02.1.ep1.el5 | 0:1.0.0-1.GA_CP02.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el5 | 1:2.4.6-1.ep1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.1.el5 | 0:4.3.0-5.GA_CP05.ep1.2.1.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.1.el5 | 0:4.3.0-5.GA_CP05.ep1.2.1.el5 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.ep1.el4 | 0:2.1.4-1.11.ep1.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.ep1.el4 | 0:2.1.4-1.11.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 | 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el4 | 0:2.1-9.2.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el4 | 0:1.4.1-6.SP13.1.ep1.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.0-2.SP3_CP08.1.ep1.el4 | 0:1.4.0-2.SP3_CP08.1.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el4 | 0:2.2.3-2.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbossas-4.3.0.GA_CP05-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el4 | 0:2.0.0-6.CP11.0jpp.ep1.1.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.ep1.el4 | 0:2.0.1-3.SP2_CP06.3.ep1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.0.0-2.GA_CP04.1.ep1.el4 | 0:1.0.0-2.GA_CP04.1.ep1.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-1.GA_CP04.2.ep1.el4 | 0:2.0.1-1.GA_CP04.2.ep1.el4 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.ep1.el4 | 0:2.0.1-3.SP2_CP06.3.ep1.el4 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.0.0-1.GA_CP02.1.ep1.el4 | 0:1.0.0-1.GA_CP02.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el4 | 1:2.4.6-1.ep1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.el4 | 0:4.3.0-5.GA_CP05.ep1.2.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.el4 | 0:4.3.0-5.GA_CP05.ep1.2.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.7.1-9jpp.ep1.2.el4 | 0:2.7.1-9jpp.ep1.2.el4 |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5Red Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.1::el4 From an advisory covering 3 CVEs |
before 0:5.0.30-0jpp_16rh | 0:5.0.30-0jpp_16rh |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0783 is a medium vulnerability (CVSS 4.2) in Apache Tomcat, published June 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in org.apache.tomcat:tomcat 6.0.20.
References
tomcat.apache.org/security-4.html
marc.info?l=bugtraq&m=127420533226623&w=2
svn.apache.org/viewvc?rev=652592&view=rev
mandriva.com/security/advisories?name=MDVSA-2009:138
redhat.com/archives/fedora-package-announce/2009-November/msg01246.html
debian.org/security/2011/dsa-2207
Show 103 moreShow less
marc.info?l=bugtraq&m=136485229118404&w=2
secunia.com/advisories/37460
svn.apache.org/viewvc?rev=781542&view=rev
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18913
vupen.com/english/advisories/2010/3056
securityfocus.com/archive/1/504090/100/0/threaded
vmware.com/security/advisories/VMSA-2009-0016.html
secunia.com/advisories/35788
svn.apache.org/viewvc?rev=781708&view=rev
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
svn.apache.org/viewvc?rev=739522&view=rev
vupen.com/english/advisories/2009/1856
mandriva.com/security/advisories?name=MDVSA-2010:176
securityfocus.com/archive/1/507985/100/0/threaded
svn.apache.org/viewvc?rev=681156&view=rev
secunia.com/advisories/42368
tomcat.apache.org/security-6.html
support.apple.com/kb/HT4077
issues.apache.org/bugzilla/show_bug.cgi?id=45933
redhat.com/archives/fedora-package-announce/2009-November/msg01156.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6450
secunia.com/advisories/35685
securitytracker.com/id?1022336
exchange.xforce.ibmcloud.com/vulnerabilities/51195
redhat.com/archives/fedora-package-announce/2009-November/msg01216.html
tomcat.apache.org/security-5.html
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
marc.info?l=bugtraq&m=129070310906557&w=2
mandriva.com/security/advisories?name=MDVSA-2009:136
sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
issues.apache.org/bugzilla/show_bug.cgi?id=29936
securityfocus.com/bid/35416
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10716
vupen.com/english/advisories/2009/3316
lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-0783
lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
github.com/advisories/GHSA-hhjg-g8xq-hhr3
access.redhat.com/errata/RHSA-2009:1143
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp07/html-single/Release_Notes/index.html
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=499600
bugzilla.redhat.com/show_bug.cgi?id=503978
bugzilla.redhat.com/show_bug.cgi?id=504153
bugzilla.redhat.com/show_bug.cgi?id=504753
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1143.json
access.redhat.com/security/cve/CVE-2008-5515
cve.org/CVERecord?id=CVE-2008-5515
nvd.nist.gov/vuln/detail/CVE-2008-5515
access.redhat.com/security/cve/CVE-2009-0580
cve.org/CVERecord?id=CVE-2009-0580
nvd.nist.gov/vuln/detail/CVE-2009-0580
access.redhat.com/security/cve/CVE-2009-0783
cve.org/CVERecord?id=CVE-2009-0783
access.redhat.com/errata/RHSA-2009:1144
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=499605
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1144.json
access.redhat.com/errata/RHSA-2009:1145
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp05/html-single/Release_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=499602
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1145.json
access.redhat.com/errata/RHSA-2009:1146
bugzilla.redhat.com/show_bug.cgi?id=499608
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1146.json
access.redhat.com/errata/RHSA-2009:1164
bugzilla.redhat.com/show_bug.cgi?id=427766
bugzilla.redhat.com/show_bug.cgi?id=489028
bugzilla.redhat.com/show_bug.cgi?id=493381
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1164.json
access.redhat.com/security/cve/CVE-2007-5333
cve.org/CVERecord?id=CVE-2007-5333
nvd.nist.gov/vuln/detail/CVE-2007-5333
access.redhat.com/security/cve/CVE-2009-0033
cve.org/CVERecord?id=CVE-2009-0033
nvd.nist.gov/vuln/detail/CVE-2009-0033
access.redhat.com/security/cve/CVE-2009-0781
cve.org/CVERecord?id=CVE-2009-0781
nvd.nist.gov/vuln/detail/CVE-2009-0781
access.redhat.com/errata/RHSA-2009:1454
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1454.json
access.redhat.com/errata/RHSA-2009:1506
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1506.json
access.redhat.com/errata/RHSA-2009:1562
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1562.json
access.redhat.com/errata/RHSA-2009:1563
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1563.json
access.redhat.com/errata/RHSA-2009:1616
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1616.json
access.redhat.com/errata/RHSA-2009:1617
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1617.json