CVE-2010-4172
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
4.3 MediumPublic exploitFix available
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
Exploit likelihood
42.0%Up 3.4 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
CVE-2010-4172- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
CVE-2010-4172- Updated
- 2026-11-02
EUVDEUVD-2022-3524 No score
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
EUVD-2022-3524- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c78g-qwpw-2jgv No score
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
GHSA-c78g-qwpw-2jgv- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVGHSA-c78g-qwpw-2jgv No score
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
GHSA-c78g-qwpw-2jgv- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.5 | 7.0.5 |
org.apache.tomcat:tomcatMaven |
6.0.12 to 6.0.29 | None known |
tomcat6Red Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat6-webappsRed Hat:enterprise_linux:6::client |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::computenode |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::server |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::workstation |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
antRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.7.1-13.jdk6.ep5.el4 | 0:1.7.1-13.jdk6.ep5.el4 |
antlrRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.7.7-7.ep5.el4 | 0:2.7.7-7.ep5.el4 |
bcelRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.2-8.1.ep5.el4 | 0:5.2-8.1.ep5.el4 |
cglibRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2-5.1.1.jdk6.ep5.el4 | 0:2.2-5.1.1.jdk6.ep5.el4 |
dom4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.6.1-11.ep5.el4 | 0:1.6.1-11.ep5.el4 |
ecjRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:3.3.1.1-3.2.2.jdk6.ep5.el4 | 1:3.3.1.1-3.2.2.jdk6.ep5.el4 |
glassfish-jafRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.0-6.1.1.jdk6.ep5.el4 | 0:1.1.0-6.1.1.jdk6.ep5.el4 |
glassfish-javamailRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.4.2-0.4.ep5.el4 | 0:1.4.2-0.4.ep5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2_13-2.2.1.jdk6.ep5.el4 | 0:1.2_13-2.2.1.jdk6.ep5.el4 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:3.3.2-1.5.GA_CP04.ep5.el4 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.4.0-3.3.GA_CP04.ep5.el4 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.4.0-3.3.GA_CP04.ep5.el4 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.1.0-1.8.ep5.el4 | 0:3.1.0-1.8.ep5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.1.0-1.8.ep5.el4 | 0:3.1.0-1.8.ep5.el4 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.0.2-3.jdk6.ep5.el4 | 1:1.0.2-3.jdk6.ep5.el4 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.0.2-3.jdk6.ep5.el4 | 1:1.0.2-3.jdk6.ep5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.4.0-4.3.GA_CP04.ep5.el4 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.4.0-4.3.GA_CP04.ep5.el4 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:3.3.2-1.5.GA_CP04.ep5.el4 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.8.0-4.1.1.jdk6.ep5.el4 | 0:1.8.0-4.1.1.jdk6.ep5.el4 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2-2.2.ep5.el4 | 0:1.2-2.2.ep5.el4 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3-9.1.1.jdk6.ep5.el4 | 0:1.3-9.1.1.jdk6.ep5.el4 |
jakarta-commons-collectionsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.2.1-4.ep5.el4 | 0:3.2.1-4.ep5.el4 |
jakarta-commons-collections-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.2.1-4.ep5.el4 | 0:3.2.1-4.ep5.el4 |
jakarta-commons-daemonRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.0.5-1.ep5.el4 | 1:1.0.5-1.ep5.el4 |
jakarta-commons-daemon-jsvcRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.0.5-1.4.ep5.el4 | 1:1.0.5-1.4.ep5.el4 |
jakarta-commons-daemon-jsvc-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.0.5-1.4.ep5.el4 | 1:1.0.5-1.4.ep5.el4 |
jakarta-commons-dbcpRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.1-16.4.ep5.el4 | 0:1.2.1-16.4.ep5.el4 |
jakarta-commons-dbcp-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.1-16.4.ep5.el4 | 0:1.2.1-16.4.ep5.el4 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.8.1-8.1.jdk6.ep5.el4 | 0:1.8.1-8.1.jdk6.ep5.el4 |
jakarta-commons-elRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0-19.2.jdk6.ep5.el4 | 0:1.0-19.2.jdk6.ep5.el4 |
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.1.1-7.4.ep5.el4 | 1:1.1.1-7.4.ep5.el4 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:3.1-1.1.1.jdk6.ep5.el4 | 1:3.1-1.1.1.jdk6.ep5.el4 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.4-1.3.1.jdk6.ep5.el4 | 0:1.4-1.3.1.jdk6.ep5.el4 |
jakarta-commons-launcherRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1-4.6.1.ep5.el4 | 0:1.1-4.6.1.ep5.el4 |
jakarta-commons-loggingRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.1-0.4.1.jdk6.ep5.el4 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1-10.2.1.jdk6.ep5.el4 | 0:1.1-10.2.1.jdk6.ep5.el4 |
jakarta-commons-logging-tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.1-0.4.1.jdk6.ep5.el4 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
jakarta-commons-modelerRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0-4.ep5.el4 | 0:2.0-4.ep5.el4 |
jakarta-commons-poolRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3-11.2.1.jdk6.ep5.el4 | 0:1.3-11.2.1.jdk6.ep5.el4 |
jakarta-commons-pool-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3-11.2.1.jdk6.ep5.el4 | 0:1.3-11.2.1.jdk6.ep5.el4 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.3.1-7.5.1.ep5.el4 | 0:1.3.1-7.5.1.ep5.el4 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.0.8-3.3.2.1.jdk6.ep5.el4 | 0:2.0.8-3.3.2.1.jdk6.ep5.el4 |
jakarta-taglibs-standardRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.1-9.ep5.el4 | 0:1.1.1-9.ep5.el4 |
javassistRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.12.0-1.jdk6.ep5.el4 | 0:3.12.0-1.jdk6.ep5.el4 |
jboss-common-coreRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.2.17-1.ep5.el4 | 0:2.2.17-1.ep5.el4 |
jboss-common-logging-jdkRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.1.2-1.ep5.el4 | 0:2.1.2-1.ep5.el4 |
jboss-common-logging-spiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.1.2-1.ep5.el4 | 0:2.1.2-1.ep5.el4 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jcommonRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.16-1.2.1.jdk6.ep5.el4 | 0:1.0.16-1.2.1.jdk6.ep5.el4 |
jfreechartRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.13-2.3.2.1.jdk6.ep5.el4 | 0:1.0.13-2.3.2.1.jdk6.ep5.el4 |
log4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.14-18.1.jdk6.ep5.el4 | 0:1.2.14-18.1.jdk6.ep5.el4 |
mod_clusterRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-jbossasRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:2.2.17-14.ep5.el4 | 1:2.2.17-14.ep5.el4 |
mx4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:3.0.1-9.3.4.ep5.el4 | 1:3.0.1-9.3.4.ep5.el4 |
objectweb-asmRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:3.1-5.3.1.jdk6.ep5.el4 | 0:3.1-5.3.1.jdk6.ep5.el4 |
regexpRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.5-1.2.1.jdk6.ep5.el4 | 0:1.5-1.2.1.jdk6.ep5.el4 |
struts12Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.9-3.ep5.el4 | 0:1.2.9-3.ep5.el4 |
tomcat-jkstatus-antRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.2.31-2.ep5.el4 | 0:1.2.31-2.ep5.el4 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.20-2.0.ep5.el4 | 0:1.1.20-2.0.ep5.el4 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:1.1.20-2.0.ep5.el4 | 0:1.1.20-2.0.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
xalan-j2Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.7.1-5.3_patch_04.ep5.el4 | 0:2.7.1-5.3_patch_04.ep5.el4 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el4 |
before 0:2.9.1-3.patch01.1.ep5.el4 | 0:2.9.1-3.patch01.1.ep5.el4 |
xml-commonsRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-jaxp-1.2-apisRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-jaxp-1.3-apisRed Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el4 |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
antRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-antlrRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-bcelRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-bsfRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-log4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-oroRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-regexpRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-resolverRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-commons-loggingRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-javamailRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jdependRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jmfRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jschRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-junitRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-nodepsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-scriptsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-swingRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-traxRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
antlrRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.7.7-7.ep5.el5 | 0:2.7.7-7.ep5.el5 |
cglibRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2-5.1.1.1.jdk6.ep5.el5 | 0:2.2-5.1.1.1.jdk6.ep5.el5 |
dom4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.6.1-11.ep5.el5 | 0:1.6.1-11.ep5.el5 |
ecj3Red Hat:jboss_enterprise_web_server:1::el5 |
before 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5 | 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2_13-3.1.1.jdk6.ep5.el5 | 0:1.2_13-3.1.1.jdk6.ep5.el5 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el5 |
before 1:3.3.2-1.4.GA_CP04.ep5.el5 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.4.0-3.2.GA_CP04.ep5.el5 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.4.0-3.2.GA_CP04.ep5.el5 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.1.0-1.8.ep5.el5 | 0:3.1.0-1.8.ep5.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.1.0-1.8.ep5.el5 | 0:3.1.0-1.8.ep5.el5 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.0.2-3.1.jdk6.ep5.el5 | 1:1.0.2-3.1.jdk6.ep5.el5 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.0.2-3.1.jdk6.ep5.el5 | 1:1.0.2-3.1.jdk6.ep5.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.4.0-4.3.GA_CP04.ep5.el5 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.4.0-4.3.GA_CP04.ep5.el5 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:3.3.2-1.4.GA_CP04.ep5.el5 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.8.0-4.1.2.1.jdk6.ep5.el5 | 0:1.8.0-4.1.2.1.jdk6.ep5.el5 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2-2.2.1.ep5.el5 | 0:1.2-2.2.1.ep5.el5 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3-9.2.1.1.jdk6.ep5.el5 | 0:1.3-9.2.1.1.jdk6.ep5.el5 |
jakarta-commons-collectionsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.2.1-4.1.ep5.el5 | 0:3.2.1-4.1.ep5.el5 |
jakarta-commons-collections-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.2.1-4.1.ep5.el5 | 0:3.2.1-4.1.ep5.el5 |
jakarta-commons-daemonRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.0.5-1.ep5.el5 | 1:1.0.5-1.ep5.el5 |
jakarta-commons-daemon-jsvcRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.0.5-1.4.ep5.el5 | 1:1.0.5-1.4.ep5.el5 |
jakarta-commons-dbcpRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.1-16.4.ep5.el5 | 0:1.2.1-16.4.ep5.el5 |
jakarta-commons-dbcp-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.1-16.4.ep5.el5 | 0:1.2.1-16.4.ep5.el5 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.8.1-8.1.jdk6.ep5.el5 | 0:1.8.1-8.1.jdk6.ep5.el5 |
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:1.1.1-7.4.ep5.el5 | 1:1.1.1-7.4.ep5.el5 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:3.1-1.2.1.jdk6.ep5.el5 | 1:3.1-1.2.1.jdk6.ep5.el5 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.4-1.3.1.jdk6.ep5.el5 | 0:1.4-1.3.1.jdk6.ep5.el5 |
jakarta-commons-loggingRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.1-0.4.1.jdk6.ep5.el5 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1-10.2.1.jdk6.ep5.el5 | 0:1.1-10.2.1.jdk6.ep5.el5 |
jakarta-commons-logging-tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.1-0.4.1.jdk6.ep5.el5 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
jakarta-commons-poolRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3-11.2.1.jdk6.ep5.el5 | 0:1.3-11.2.1.jdk6.ep5.el5 |
jakarta-commons-pool-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3-11.2.1.jdk6.ep5.el5 | 0:1.3-11.2.1.jdk6.ep5.el5 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3.1-7.5.2.ep5.el5 | 0:1.3.1-7.5.2.ep5.el5 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5 | 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5 |
jakarta-taglibs-standardRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.1-9.1.ep5.el5 | 0:1.1.1-9.1.ep5.el5 |
javassistRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.12.0-1.jdk6.ep5.el5 | 0:3.12.0-1.jdk6.ep5.el5 |
jboss-common-coreRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.2.17-1.ep5.el5 | 0:2.2.17-1.ep5.el5 |
jboss-common-logging-jdkRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.1.2-1.ep5.el5 | 0:2.1.2-1.ep5.el5 |
jboss-common-logging-spiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.1.2-1.ep5.el5 | 0:2.1.2-1.ep5.el5 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jcommonRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.16-1.2.1.jdk6.ep5.el5 | 0:1.0.16-1.2.1.jdk6.ep5.el5 |
jfreechartRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.13-2.3.2.1.jdk6.ep5.el5 | 0:1.0.13-2.3.2.1.jdk6.ep5.el5 |
mod_clusterRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-jbossasRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 |
before 1:2.2.17-11.1.ep5.el5 | 1:2.2.17-11.1.ep5.el5 |
objectweb-asmRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:3.1-5.3.1.jdk6.ep5.el5 | 0:3.1-5.3.1.jdk6.ep5.el5 |
struts12Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.9-3.1.ep5.el5 | 0:1.2.9-3.1.ep5.el5 |
tomcat-jkstatus-antRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.2.31-2.ep5.el5 | 0:1.2.31-2.ep5.el5 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.1.20-2.1.ep5.el5 | 0:1.1.20-2.1.ep5.el5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
xalan-j2Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.7.1-5.3_patch_04.ep5.el5 | 0:2.7.1-5.3_patch_04.ep5.el5 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:2.9.1-3.patch01.1.ep5.el5 | 0:2.9.1-3.patch01.1.ep5.el5 |
xml-commonsRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-jaxp-1.2-apisRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-jaxp-1.3-apisRed Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el5 |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
antRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-antlrRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-bcelRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-bsfRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-log4jRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-oroRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-regexpRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-resolverRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-commons-loggingRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-commons-netRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-javamailRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jdependRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jmfRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jschRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-junitRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-nodepsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-scriptsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-swingRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-traxRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
antlrRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.7.7-7.ep5.el6 | 0:2.7.7-7.ep5.el6 |
cglibRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.2-5.4.ep5.el6 | 0:2.2-5.4.ep5.el6 |
dom4jRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.6.1-11.1.ep5.el6 | 0:1.6.1-11.1.ep5.el6 |
ecj3Red Hat:jboss_enterprise_web_server:1::el6 |
before 1:3.3.1.1-4.ep5.el6 | 1:3.3.1.1-4.ep5.el6 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.2_13-3.1.4.ep5.el6 | 0:1.2_13-3.1.4.ep5.el6 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el6 |
before 1:3.3.2-1.8.GA_CP04.ep5.el6 | 1:3.3.2-1.8.GA_CP04.ep5.el6 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.4.0-3.5.GA_CP04.ep5.el6 | 0:3.4.0-3.5.GA_CP04.ep5.el6 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.4.0-3.5.GA_CP04.ep5.el6 | 0:3.4.0-3.5.GA_CP04.ep5.el6 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.1.0-1.8.ep5.el6 | 0:3.1.0-1.8.ep5.el6 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.1.0-1.8.ep5.el6 | 0:3.1.0-1.8.ep5.el6 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el6 |
before 1:1.0.2-3.3.ep5.el6 | 1:1.0.2-3.3.ep5.el6 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el6 |
before 1:1.0.2-3.3.ep5.el6 | 1:1.0.2-3.3.ep5.el6 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.4.0-4.4.GA_CP04.ep5.el6 | 0:3.4.0-4.4.GA_CP04.ep5.el6 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:3.4.0-4.4.GA_CP04.ep5.el6 | 0:3.4.0-4.4.GA_CP04.ep5.el6 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el6 |
before 1:3.3.2-1.8.GA_CP04.ep5.el6 | 1:3.3.2-1.8.GA_CP04.ep5.el6 |
httpdRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-toolsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.8.0-9.ep5.el6 | 0:1.8.0-9.ep5.el6 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.2-2.2.2.ep5.el6 | 0:1.2-2.2.2.ep5.el6 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el6 |
before 0:1.3-12.1.ep5.el6 | 0:1.3-12.1.ep5.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting | 2010-11-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4172 is a medium vulnerability (CVSS 4.3) in Apache Tomcat, published November 26, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.0%, the 98th percentile. Fixed in org.apache.tomcat:tomcat 7.0.5.
References
ubuntu.com/usn/USN-1048-1
secunia.com/advisories/42337
svn.apache.org/viewvc?view=revision&revision=1037778
securityfocus.com/archive/1/514866/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/63422
Show 67 moreShow less
tomcat.apache.org/security-7.html
bugzilla.redhat.com/show_bug.cgi?id=656246
vupen.com/english/advisories/2010/3047
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html
redhat.com/support/errata/RHSA-2011-0897.html
securitytracker.com/id?1024764
support.apple.com/kb/HT5002
marc.info?l=bugtraq&m=139344343412337&w=2
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
nvd.nist.gov/vuln/detail/CVE-2010-4172
github.com/apache/tomcat/commit/5971f9392edc6d70808b2599b062b050fcd11d23
access.redhat.com/errata/RHSA-2011:0791
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0791.json
cve.org/CVERecord?id=CVE-2010-3718
docs.redhat.com/docs/en-US/JBoss_Enterprise_Web_Server/1.0/html-single/Release_Notes_1.0.2/index.html
This page doesn't list everything
Left out here: 76 package rows. The JSON record has them.