Every CVE Search/ Get API key

CVE-2010-1157

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

2.6 LowPublic exploitFix available

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Exploit likelihood

52.5%Up 14.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Record
CVE-2010-1157
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Record
CVE-2010-1157
Updated
2026-11-02
EUVDEUVD-2022-5514 No score

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Record
EUVD-2022-5514
Updated
2026-11-03
GitHub AdvisoriesGHSA-w6q7-ww2x-7gm3 No score

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Record
GHSA-w6q7-ww2x-7gm3
Weakness
CWE-200
Updated
2026-11-02
OSVGHSA-w6q7-ww2x-7gm3 No score

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.

Record
GHSA-w6q7-ww2x-7gm3
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.tomcat:tomcat
Maven
 5.5.0 to 5.5.29
5.5.30
org.apache.tomcat:tomcat
Maven
 6.0.0 to 6.0.26
6.0.28
tomcat5.5
Debian:5.0
From an advisory covering 9 CVEs
 before 5.5.26-5lenny2, plus listed versions
5.5.26-5
5.5.26-5lenny2
org.apache.tomcat:tomcat
Maven
 5.5.0 up to 5.5.30
5.5.30
org.apache.tomcat:tomcat
Maven
 6.0.0 up to 6.0.28
6.0.28
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 2 CVEs
 before 0:2.0.0-6.CP14.0jpp.ep1.1.el4
0:2.0.0-6.CP14.0jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 2 CVEs
 before 0:2.0.0-6.CP14.0jpp.ep1.1.el4
0:2.0.0-6.CP14.0jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 2 CVEs
 before 0:2.0.0-6.CP14.0jpp.ep1.1.el5
0:2.0.0-6.CP14.0jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 2 CVEs
 before 0:2.0.0-6.CP14.0jpp.ep1.1.el5
0:2.0.0-6.CP14.0jpp.ep1.1.el5
ant
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el4
0:1.7.1-13.jdk6.ep5.el4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
antlr
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.7.7-7.ep5.el4
0:2.7.7-7.ep5.el4
bcel
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.2-8.1.ep5.el4
0:5.2-8.1.ep5.el4
cglib
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2-5.1.1.jdk6.ep5.el4
0:2.2-5.1.1.jdk6.ep5.el4
dom4j
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.6.1-11.ep5.el4
0:1.6.1-11.ep5.el4
ecj
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:3.3.1.1-3.2.2.jdk6.ep5.el4
1:3.3.1.1-3.2.2.jdk6.ep5.el4
glassfish-jaf
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.0-6.1.1.jdk6.ep5.el4
0:1.1.0-6.1.1.jdk6.ep5.el4
glassfish-javamail
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.4.2-0.4.ep5.el4
0:1.4.2-0.4.ep5.el4
glassfish-jsf
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2_13-2.2.1.jdk6.ep5.el4
0:1.2_13-2.2.1.jdk6.ep5.el4
hibernate3
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:3.3.2-1.5.GA_CP04.ep5.el4
1:3.3.2-1.5.GA_CP04.ep5.el4
hibernate3-annotations
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.4.0-3.3.GA_CP04.ep5.el4
0:3.4.0-3.3.GA_CP04.ep5.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.4.0-3.3.GA_CP04.ep5.el4
0:3.4.0-3.3.GA_CP04.ep5.el4
hibernate3-commons-annotations
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el4
0:3.1.0-1.8.ep5.el4
hibernate3-commons-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el4
0:3.1.0-1.8.ep5.el4
hibernate3-ejb-persistence-3.0-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.0.2-3.jdk6.ep5.el4
1:1.0.2-3.jdk6.ep5.el4
hibernate3-ejb-persistence-3.0-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.0.2-3.jdk6.ep5.el4
1:1.0.2-3.jdk6.ep5.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.4.0-4.3.GA_CP04.ep5.el4
0:3.4.0-4.3.GA_CP04.ep5.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.4.0-4.3.GA_CP04.ep5.el4
0:3.4.0-4.3.GA_CP04.ep5.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:3.3.2-1.5.GA_CP04.ep5.el4
1:3.3.2-1.5.GA_CP04.ep5.el4
httpd22
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-apr
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-apr-devel
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-apr-util
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-apr-util-devel
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-devel
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
httpd22-manual
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-14.ep5.el4
0:2.2.17-14.ep5.el4
jakarta-commons-beanutils
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.8.0-4.1.1.jdk6.ep5.el4
0:1.8.0-4.1.1.jdk6.ep5.el4
jakarta-commons-chain
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2-2.2.ep5.el4
0:1.2-2.2.ep5.el4
jakarta-commons-codec
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.3-9.1.1.jdk6.ep5.el4
0:1.3-9.1.1.jdk6.ep5.el4
jakarta-commons-collections
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.2.1-4.ep5.el4
0:3.2.1-4.ep5.el4
jakarta-commons-collections-tomcat5
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.2.1-4.ep5.el4
0:3.2.1-4.ep5.el4
jakarta-commons-daemon
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.0.5-1.ep5.el4
1:1.0.5-1.ep5.el4
jakarta-commons-daemon-jsvc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.0.5-1.4.ep5.el4
1:1.0.5-1.4.ep5.el4
jakarta-commons-daemon-jsvc-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.0.5-1.4.ep5.el4
1:1.0.5-1.4.ep5.el4
jakarta-commons-dbcp
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.1-16.4.ep5.el4
0:1.2.1-16.4.ep5.el4
jakarta-commons-dbcp-tomcat5
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.1-16.4.ep5.el4
0:1.2.1-16.4.ep5.el4
jakarta-commons-digester
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.8.1-8.1.jdk6.ep5.el4
0:1.8.1-8.1.jdk6.ep5.el4
jakarta-commons-el
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0-19.2.jdk6.ep5.el4
0:1.0-19.2.jdk6.ep5.el4
jakarta-commons-fileupload
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.1.1-7.4.ep5.el4
1:1.1.1-7.4.ep5.el4
jakarta-commons-httpclient
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:3.1-1.1.1.jdk6.ep5.el4
1:3.1-1.1.1.jdk6.ep5.el4
jakarta-commons-io
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.4-1.3.1.jdk6.ep5.el4
0:1.4-1.3.1.jdk6.ep5.el4
jakarta-commons-launcher
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1-4.6.1.ep5.el4
0:1.1-4.6.1.ep5.el4
jakarta-commons-logging
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.1-0.4.1.jdk6.ep5.el4
0:1.1.1-0.4.1.jdk6.ep5.el4
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1-10.2.1.jdk6.ep5.el4
0:1.1-10.2.1.jdk6.ep5.el4
jakarta-commons-logging-tomcat6
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.1-0.4.1.jdk6.ep5.el4
0:1.1.1-0.4.1.jdk6.ep5.el4
jakarta-commons-modeler
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.0-4.ep5.el4
0:2.0-4.ep5.el4
jakarta-commons-pool
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.3-11.2.1.jdk6.ep5.el4
0:1.3-11.2.1.jdk6.ep5.el4
jakarta-commons-pool-tomcat5
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.3-11.2.1.jdk6.ep5.el4
0:1.3-11.2.1.jdk6.ep5.el4
jakarta-commons-validator
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.3.1-7.5.1.ep5.el4
0:1.3.1-7.5.1.ep5.el4
jakarta-oro
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.0.8-3.3.2.1.jdk6.ep5.el4
0:2.0.8-3.3.2.1.jdk6.ep5.el4
jakarta-taglibs-standard
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.1-9.ep5.el4
0:1.1.1-9.ep5.el4
javassist
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.12.0-1.jdk6.ep5.el4
0:3.12.0-1.jdk6.ep5.el4
jboss-common-core
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.2.17-1.ep5.el4
0:2.2.17-1.ep5.el4
jboss-common-logging-jdk
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.1.2-1.ep5.el4
0:2.1.2-1.ep5.el4
jboss-common-logging-spi
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.1.2-1.ep5.el4
0:2.1.2-1.ep5.el4
jboss-javaee
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el4
0:5.0.1-2.9.ep5.el4
jboss-javaee-poms
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el4
0:5.0.1-2.9.ep5.el4
jboss-jms-1.1-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el4
0:5.0.1-2.9.ep5.el4
jboss-transaction-1.0.1-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el4
0:5.0.1-2.9.ep5.el4
jcommon
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.16-1.2.1.jdk6.ep5.el4
0:1.0.16-1.2.1.jdk6.ep5.el4
jfreechart
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.13-2.3.2.1.jdk6.ep5.el4
0:1.0.13-2.3.2.1.jdk6.ep5.el4
log4j
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.14-18.1.jdk6.ep5.el4
0:1.2.14-18.1.jdk6.ep5.el4
mod_cluster
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-demo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-jbossas
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-jbossweb2
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-native
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-native-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_cluster-tomcat6
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.0.10-2.GA_CP01.ep5.el4
0:1.0.10-2.GA_CP01.ep5.el4
mod_jk
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.31-1.ep5.el4
0:1.2.31-1.ep5.el4
mod_jk-ap20
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.31-1.ep5.el4
0:1.2.31-1.ep5.el4
mod_jk-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.31-1.ep5.el4
0:1.2.31-1.ep5.el4
mod_jk-manual
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.31-1.ep5.el4
0:1.2.31-1.ep5.el4
mod_ssl22
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:2.2.17-14.ep5.el4
1:2.2.17-14.ep5.el4
mx4j
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:3.0.1-9.3.4.ep5.el4
1:3.0.1-9.3.4.ep5.el4
objectweb-asm
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:3.1-5.3.1.jdk6.ep5.el4
0:3.1-5.3.1.jdk6.ep5.el4
regexp
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.5-1.2.1.jdk6.ep5.el4
0:1.5-1.2.1.jdk6.ep5.el4
struts12
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.9-3.ep5.el4
0:1.2.9-3.ep5.el4
tomcat-jkstatus-ant
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.2.31-2.ep5.el4
0:1.2.31-2.ep5.el4
tomcat-native
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.20-2.0.ep5.el4
0:1.1.20-2.0.ep5.el4
tomcat-native-debuginfo
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:1.1.20-2.0.ep5.el4
0:1.1.20-2.0.ep5.el4
tomcat5
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-admin-webapps
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-common-lib
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-jasper
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-jasper-eclipse
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-jasper-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-jsp-2.0-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-jsp-2.0-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-parent
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-server-lib
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-servlet-2.4-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-servlet-2.4-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat5-webapps
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:5.5.33-14_patch_04.ep5.el4
0:5.5.33-14_patch_04.ep5.el4
tomcat6
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-el-1.0-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-lib
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:6.0.32-15_patch_03.ep5.el4
0:6.0.32-15_patch_03.ep5.el4
xalan-j2
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.7.1-5.3_patch_04.ep5.el4
0:2.7.1-5.3_patch_04.ep5.el4
xerces-j2
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 0:2.9.1-3.patch01.1.ep5.el4
0:2.9.1-3.patch01.1.ep5.el4
xml-commons
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.3.04-7.12.ep5.el4
1:1.3.04-7.12.ep5.el4
xml-commons-jaxp-1.2-apis
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.3.04-7.12.ep5.el4
1:1.3.04-7.12.ep5.el4
xml-commons-jaxp-1.3-apis
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.3.04-7.12.ep5.el4
1:1.3.04-7.12.ep5.el4
xml-commons-resolver12
Red Hat:jboss_enterprise_web_server:1::el4
From an advisory covering 8 CVEs
 before 1:1.3.04-7.12.ep5.el4
1:1.3.04-7.12.ep5.el4
ant
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-antlr
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-bcel
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-bsf
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-log4j
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-oro
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-regexp
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-apache-resolver
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-commons-logging
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-javamail
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-jdepend
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-jmf
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-jsch
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-junit
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-nodeps
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-scripts
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-swing
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
ant-trax
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.7.1-13.jdk6.ep5.el5
0:1.7.1-13.jdk6.ep5.el5
antlr
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.7.7-7.ep5.el5
0:2.7.7-7.ep5.el5
cglib
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.2-5.1.1.1.jdk6.ep5.el5
0:2.2-5.1.1.1.jdk6.ep5.el5
dom4j
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.6.1-11.ep5.el5
0:1.6.1-11.ep5.el5
ecj3
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5
1:3.3.1.1-3.1.1.1.jdk6.ep5.el5
glassfish-jsf
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2_13-3.1.1.jdk6.ep5.el5
0:1.2_13-3.1.1.jdk6.ep5.el5
hibernate3
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:3.3.2-1.4.GA_CP04.ep5.el5
1:3.3.2-1.4.GA_CP04.ep5.el5
hibernate3-annotations
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.4.0-3.2.GA_CP04.ep5.el5
0:3.4.0-3.2.GA_CP04.ep5.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.4.0-3.2.GA_CP04.ep5.el5
0:3.4.0-3.2.GA_CP04.ep5.el5
hibernate3-commons-annotations
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el5
0:3.1.0-1.8.ep5.el5
hibernate3-commons-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el5
0:3.1.0-1.8.ep5.el5
hibernate3-ejb-persistence-3.0-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:1.0.2-3.1.jdk6.ep5.el5
1:1.0.2-3.1.jdk6.ep5.el5
hibernate3-ejb-persistence-3.0-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:1.0.2-3.1.jdk6.ep5.el5
1:1.0.2-3.1.jdk6.ep5.el5
hibernate3-entitymanager
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.4.0-4.3.GA_CP04.ep5.el5
0:3.4.0-4.3.GA_CP04.ep5.el5
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.4.0-4.3.GA_CP04.ep5.el5
0:3.4.0-4.3.GA_CP04.ep5.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:3.3.2-1.4.GA_CP04.ep5.el5
1:3.3.2-1.4.GA_CP04.ep5.el5
httpd
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.2.17-11.1.ep5.el5
0:2.2.17-11.1.ep5.el5
httpd-devel
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.2.17-11.1.ep5.el5
0:2.2.17-11.1.ep5.el5
httpd-manual
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.2.17-11.1.ep5.el5
0:2.2.17-11.1.ep5.el5
jakarta-commons-beanutils
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.8.0-4.1.2.1.jdk6.ep5.el5
0:1.8.0-4.1.2.1.jdk6.ep5.el5
jakarta-commons-chain
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2-2.2.1.ep5.el5
0:1.2-2.2.1.ep5.el5
jakarta-commons-codec
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3-9.2.1.1.jdk6.ep5.el5
0:1.3-9.2.1.1.jdk6.ep5.el5
jakarta-commons-collections
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.2.1-4.1.ep5.el5
0:3.2.1-4.1.ep5.el5
jakarta-commons-collections-tomcat5
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.2.1-4.1.ep5.el5
0:3.2.1-4.1.ep5.el5
jakarta-commons-daemon
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:1.0.5-1.ep5.el5
1:1.0.5-1.ep5.el5
jakarta-commons-daemon-jsvc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:1.0.5-1.4.ep5.el5
1:1.0.5-1.4.ep5.el5
jakarta-commons-dbcp
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.1-16.4.ep5.el5
0:1.2.1-16.4.ep5.el5
jakarta-commons-dbcp-tomcat5
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.1-16.4.ep5.el5
0:1.2.1-16.4.ep5.el5
jakarta-commons-digester
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.8.1-8.1.jdk6.ep5.el5
0:1.8.1-8.1.jdk6.ep5.el5
jakarta-commons-fileupload
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:1.1.1-7.4.ep5.el5
1:1.1.1-7.4.ep5.el5
jakarta-commons-httpclient
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:3.1-1.2.1.jdk6.ep5.el5
1:3.1-1.2.1.jdk6.ep5.el5
jakarta-commons-io
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.4-1.3.1.jdk6.ep5.el5
0:1.4-1.3.1.jdk6.ep5.el5
jakarta-commons-logging
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.1.1-0.4.1.jdk6.ep5.el5
0:1.1.1-0.4.1.jdk6.ep5.el5
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.1-10.2.1.jdk6.ep5.el5
0:1.1-10.2.1.jdk6.ep5.el5
jakarta-commons-logging-tomcat6
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.1.1-0.4.1.jdk6.ep5.el5
0:1.1.1-0.4.1.jdk6.ep5.el5
jakarta-commons-pool
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3-11.2.1.jdk6.ep5.el5
0:1.3-11.2.1.jdk6.ep5.el5
jakarta-commons-pool-tomcat5
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3-11.2.1.jdk6.ep5.el5
0:1.3-11.2.1.jdk6.ep5.el5
jakarta-commons-validator
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3.1-7.5.2.ep5.el5
0:1.3.1-7.5.2.ep5.el5
jakarta-oro
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5
0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5
jakarta-taglibs-standard
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.1.1-9.1.ep5.el5
0:1.1.1-9.1.ep5.el5
javassist
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.12.0-1.jdk6.ep5.el5
0:3.12.0-1.jdk6.ep5.el5
jboss-common-core
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.2.17-1.ep5.el5
0:2.2.17-1.ep5.el5
jboss-common-logging-jdk
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.1.2-1.ep5.el5
0:2.1.2-1.ep5.el5
jboss-common-logging-spi
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.1.2-1.ep5.el5
0:2.1.2-1.ep5.el5
jboss-javaee
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el5
0:5.0.1-2.9.ep5.el5
jboss-javaee-poms
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el5
0:5.0.1-2.9.ep5.el5
jboss-jms-1.1-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el5
0:5.0.1-2.9.ep5.el5
jboss-transaction-1.0.1-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el5
0:5.0.1-2.9.ep5.el5
jcommon
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.16-1.2.1.jdk6.ep5.el5
0:1.0.16-1.2.1.jdk6.ep5.el5
jfreechart
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.13-2.3.2.1.jdk6.ep5.el5
0:1.0.13-2.3.2.1.jdk6.ep5.el5
mod_cluster
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_cluster-demo
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_cluster-jbossas
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_cluster-jbossweb2
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_cluster-native
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_cluster-tomcat6
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.0.10-2.1.GA_CP01.ep5.el5
0:1.0.10-2.1.GA_CP01.ep5.el5
mod_jk
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.31-1.1.ep5.el5
0:1.2.31-1.1.ep5.el5
mod_jk-ap20
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.31-1.1.ep5.el5
0:1.2.31-1.1.ep5.el5
mod_jk-manual
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.31-1.1.ep5.el5
0:1.2.31-1.1.ep5.el5
mod_ssl
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 1:2.2.17-11.1.ep5.el5
1:2.2.17-11.1.ep5.el5
objectweb-asm
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:3.1-5.3.1.jdk6.ep5.el5
0:3.1-5.3.1.jdk6.ep5.el5
struts12
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.9-3.1.ep5.el5
0:1.2.9-3.1.ep5.el5
tomcat-jkstatus-ant
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.2.31-2.ep5.el5
0:1.2.31-2.ep5.el5
tomcat-native
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.1.20-2.1.ep5.el5
0:1.1.20-2.1.ep5.el5
tomcat5
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-admin-webapps
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-common-lib
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-jasper
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-jasper-eclipse
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-jasper-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-jsp-2.0-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-jsp-2.0-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-parent
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-server-lib
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-servlet-2.4-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-servlet-2.4-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat5-webapps
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:5.5.33-16_patch_04.ep5.el5
0:5.5.33-16_patch_04.ep5.el5
tomcat6
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-admin-webapps
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-docs-webapp
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-el-1.0-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-javadoc
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-jsp-2.1-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-lib
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-log4j
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-servlet-2.5-api
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
tomcat6-webapps
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:6.0.32-15.1_patch_03.ep5.el5
0:6.0.32-15.1_patch_03.ep5.el5
xalan-j2
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.7.1-5.3_patch_04.ep5.el5
0:2.7.1-5.3_patch_04.ep5.el5
xerces-j2
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:2.9.1-3.patch01.1.ep5.el5
0:2.9.1-3.patch01.1.ep5.el5
xml-commons
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3.04-7.10.jdk6.ep5.el5
0:1.3.04-7.10.jdk6.ep5.el5
xml-commons-jaxp-1.2-apis
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3.04-7.10.jdk6.ep5.el5
0:1.3.04-7.10.jdk6.ep5.el5
xml-commons-jaxp-1.3-apis
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3.04-7.10.jdk6.ep5.el5
0:1.3.04-7.10.jdk6.ep5.el5
xml-commons-resolver12
Red Hat:jboss_enterprise_web_server:1::el5
From an advisory covering 8 CVEs
 before 0:1.3.04-7.10.jdk6.ep5.el5
0:1.3.04-7.10.jdk6.ep5.el5
ant
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-antlr
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-bcel
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-bsf
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-log4j
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-oro
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-regexp
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-apache-resolver
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-commons-logging
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-commons-net
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-javamail
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-jdepend
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-jmf
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-jsch
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-junit
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-nodeps
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-scripts
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-swing
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
ant-trax
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.7.1-14.ep5.el6
0:1.7.1-14.ep5.el6
antlr
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.7.7-7.ep5.el6
0:2.7.7-7.ep5.el6
cglib
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2-5.4.ep5.el6
0:2.2-5.4.ep5.el6
dom4j
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.6.1-11.1.ep5.el6
0:1.6.1-11.1.ep5.el6
ecj3
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:3.3.1.1-4.ep5.el6
1:3.3.1.1-4.ep5.el6
glassfish-jsf
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.2_13-3.1.4.ep5.el6
0:1.2_13-3.1.4.ep5.el6
hibernate3
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:3.3.2-1.8.GA_CP04.ep5.el6
1:3.3.2-1.8.GA_CP04.ep5.el6
hibernate3-annotations
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.4.0-3.5.GA_CP04.ep5.el6
0:3.4.0-3.5.GA_CP04.ep5.el6
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.4.0-3.5.GA_CP04.ep5.el6
0:3.4.0-3.5.GA_CP04.ep5.el6
hibernate3-commons-annotations
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el6
0:3.1.0-1.8.ep5.el6
hibernate3-commons-annotations-javadoc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.1.0-1.8.ep5.el6
0:3.1.0-1.8.ep5.el6
hibernate3-ejb-persistence-3.0-api
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:1.0.2-3.3.ep5.el6
1:1.0.2-3.3.ep5.el6
hibernate3-ejb-persistence-3.0-api-javadoc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:1.0.2-3.3.ep5.el6
1:1.0.2-3.3.ep5.el6
hibernate3-entitymanager
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.4.0-4.4.GA_CP04.ep5.el6
0:3.4.0-4.4.GA_CP04.ep5.el6
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.4.0-4.4.GA_CP04.ep5.el6
0:3.4.0-4.4.GA_CP04.ep5.el6
hibernate3-javadoc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:3.3.2-1.8.GA_CP04.ep5.el6
1:3.3.2-1.8.GA_CP04.ep5.el6
httpd
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2.17-11.2.ep5.el6
0:2.2.17-11.2.ep5.el6
httpd-devel
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2.17-11.2.ep5.el6
0:2.2.17-11.2.ep5.el6
httpd-manual
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2.17-11.2.ep5.el6
0:2.2.17-11.2.ep5.el6
httpd-tools
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2.17-11.2.ep5.el6
0:2.2.17-11.2.ep5.el6
jakarta-commons-beanutils
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.8.0-9.ep5.el6
0:1.8.0-9.ep5.el6
jakarta-commons-chain
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.2-2.2.2.ep5.el6
0:1.2-2.2.2.ep5.el6
jakarta-commons-codec
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.3-12.1.ep5.el6
0:1.3-12.1.ep5.el6
jakarta-commons-collections
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.2.1-4.ep5.el6
0:3.2.1-4.ep5.el6
jakarta-commons-collections-tomcat5
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.2.1-4.ep5.el6
0:3.2.1-4.ep5.el6
jakarta-commons-daemon
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:1.0.5-1.1.ep5.el6
1:1.0.5-1.1.ep5.el6
jakarta-commons-daemon-jsvc
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:1.0.5-1.4.ep5.el6
1:1.0.5-1.4.ep5.el6
jakarta-commons-dbcp
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.2.1-16.2.ep5.el6
0:1.2.1-16.2.ep5.el6
jakarta-commons-dbcp-tomcat5
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.2.1-16.2.ep5.el6
0:1.2.1-16.2.ep5.el6
jakarta-commons-digester
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.8.1-8.1.1.1.ep5.el6
0:1.8.1-8.1.1.1.ep5.el6
jakarta-commons-fileupload
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:1.1.1-7.5.ep5.el6
1:1.1.1-7.5.ep5.el6
jakarta-commons-httpclient
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 1:3.1-1.2.2.ep5.el6
1:3.1-1.2.2.ep5.el6
jakarta-commons-io
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.4-4.ep5.el6
0:1.4-4.ep5.el6
jakarta-commons-logging
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.1.1-1.ep5.el6
0:1.1.1-1.ep5.el6
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.1-10.2.2.1.ep5.el6
0:1.1-10.2.2.1.ep5.el6
jakarta-commons-logging-tomcat6
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.1.1-1.ep5.el6
0:1.1.1-1.ep5.el6
jakarta-commons-pool
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.3-15.ep5.el6
0:1.3-15.ep5.el6
jakarta-commons-pool-tomcat5
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.3-15.ep5.el6
0:1.3-15.ep5.el6
jakarta-commons-validator
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.3.1-7.5.2.ep5.el6
0:1.3.1-7.5.2.ep5.el6
jakarta-oro
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.0.8-7.ep5.el6
0:2.0.8-7.ep5.el6
jakarta-taglibs-standard
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.1.1-12.ep5.el6
0:1.1.1-12.ep5.el6
javassist
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:3.12.0-3.ep5.el6
0:3.12.0-3.ep5.el6
jboss-common-core
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.2.17-1.2.ep5.el6
0:2.2.17-1.2.ep5.el6
jboss-common-logging-jdk
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.1.2-1.2.ep5.el6
0:2.1.2-1.2.ep5.el6
jboss-common-logging-spi
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:2.1.2-1.ep5.el6
0:2.1.2-1.ep5.el6
jboss-javaee
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el6
0:5.0.1-2.9.ep5.el6
jboss-javaee-poms
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el6
0:5.0.1-2.9.ep5.el6
jboss-jms-1.1-api
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el6
0:5.0.1-2.9.ep5.el6
jboss-transaction-1.0.1-api
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:5.0.1-2.9.ep5.el6
0:5.0.1-2.9.ep5.el6
jcommon
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.0.16-1.2.2.ep5.el6
0:1.0.16-1.2.2.ep5.el6
jfreechart
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.0.13-2.3.2.1.2.ep5.el6
0:1.0.13-2.3.2.1.2.ep5.el6
mod_cluster
Red Hat:jboss_enterprise_web_server:1::el6
From an advisory covering 8 CVEs
 before 0:1.0.10-2.2.GA_CP01.ep5.el6
0:1.0.10-2.2.GA_CP01.ep5.el6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBApache Tomcat 5.5.0 < 5.5.29 / 6.0.0 < 6.0.26 - Information Disclosure2010-04-22

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1157 is a low vulnerability (CVSS 2.6) in Apache Tomcat, published April 23, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 52.5%, the 98th percentile. Fixed in org.apache.tomcat:tomcat 5.5.30.

References

Show 76 moreShow less
This page doesn't list everything

Left out here: 47 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open