Every CVE Search/ Get API key

CVE-2013-6440

Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML

5.0 MediumFix available

CVE-2013-6440 is a medium vulnerability (CVSS 5.0) in Internet2 Opensaml, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.75%, the 86th percentile. Fixed in org.opensaml:opensaml 2.6.1.

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Exploit likelihood

2.75%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Record
CVE-2013-6440
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Record
CVE-2013-6440
Updated
2026-11-02
EUVDEUVD-2022-5302 No score

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Record
EUVD-2022-5302
Updated
2026-11-03
GitHub AdvisoriesGHSA-v723-58jv-2qc4 No score

Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Record
GHSA-v723-58jv-2qc4
Weakness
CWE-200
Updated
2026-11-02
OSVGHSA-v723-58jv-2qc4 No score

Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML

The (1) BasicParserPool, (2) StaticBasicParserPool, (3) XML Decrypter, and (4) SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.

Record
GHSA-v723-58jv-2qc4
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.opensaml:opensaml
Maven
 before 2.6.1
2.6.1
org.opensaml:opensaml
Maven
 before 2.6.1, plus listed versions
1.12.1.02.2.02.2.12.2.3
Show 5 moreShow less
2.4.12.5.12.5.1-12.5.32.6.0
2.6.1
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.ep6.el5
0:7.3.1-3.Final_redhat_3.ep6.el5
hornetq
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:2.3.14-1.Final_redhat_1.1.ep6.el5
0:2.3.14-1.Final_redhat_1.1.ep6.el5
jacorb-jboss
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:2.3.2-13.redhat_6.1.ep6.el5
0:2.3.2-13.redhat_6.1.ep6.el5
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
Show 126 moreShow less
Affected packages
PackageAffectedFixed
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el5
0:7.3.1-3.Final_redhat_3.1.ep6.el5
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el5
0:7.3.1-4.Final_redhat_3.1.ep6.el5
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el5
0:7.3.1-2.Final_redhat_3.1.ep6.el5
jboss-logmanager
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.5.2-1.Final_redhat_1.1.ep6.el5
0:1.5.2-1.Final_redhat_1.1.ep6.el5
jboss-marshalling
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.4.3-1.Final_redhat_1.1.ep6.el5
0:1.4.3-1.Final_redhat_1.1.ep6.el5
jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:3.0.9-1.GA_redhat_1.1.ep6.el5
0:3.0.9-1.GA_redhat_1.1.ep6.el5
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-5.Final_redhat_3.1.ep6.el5
0:7.3.1-5.Final_redhat_3.1.ep6.el5
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.1-6.Final_redhat_3.1.ep6.el5
0:7.3.1-6.Final_redhat_3.1.ep6.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:7.3.0-1.Final_redhat_1.1.ep6.el5
0:7.3.0-1.Final_redhat_1.1.ep6.el5
netty
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:3.6.7-1.Final_redhat_1.1.ep6.el5
0:3.6.7-1.Final_redhat_1.1.ep6.el5
picketbox
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:4.0.19-2.SP3_redhat_1.1.ep6.el5
0:4.0.19-2.SP3_redhat_1.1.ep6.el5
weld-core
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.1.17-1.Final_redhat_1.1.ep6.el5
0:1.1.17-1.Final_redhat_1.1.ep6.el5
xml-security
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.5.6-1.redhat_1.1.ep6.el5
0:1.5.6-1.redhat_1.1.ep6.el5
xmltooling
Red Hat:jboss_enterprise_application_platform:6::el5
 before 0:1.3.4-5.redhat_3.1.ep6.el5
0:1.3.4-5.redhat_3.1.ep6.el5
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.ep6.el6
0:7.3.1-3.Final_redhat_3.ep6.el6
hornetq
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.3.14-1.Final_redhat_1.1.ep6.el6
0:2.3.14-1.Final_redhat_1.1.ep6.el6
jacorb-jboss
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.3.2-13.redhat_6.1.ep6.el6
0:2.3.2-13.redhat_6.1.ep6.el6
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-3.Final_redhat_3.1.ep6.el6
0:7.3.1-3.Final_redhat_3.1.ep6.el6
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-4.Final_redhat_3.1.ep6.el6
0:7.3.1-4.Final_redhat_3.1.ep6.el6
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-2.Final_redhat_3.1.ep6.el6
0:7.3.1-2.Final_redhat_3.1.ep6.el6
jboss-logmanager
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.5.2-1.Final_redhat_1.1.ep6.el6
0:1.5.2-1.Final_redhat_1.1.ep6.el6
jboss-marshalling
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.4.3-1.Final_redhat_1.1.ep6.el6
0:1.4.3-1.Final_redhat_1.1.ep6.el6
jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:3.0.9-1.GA_redhat_1.1.ep6.el6
0:3.0.9-1.GA_redhat_1.1.ep6.el6
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-5.Final_redhat_3.1.ep6.el6
0:7.3.1-5.Final_redhat_3.1.ep6.el6
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.1-6.Final_redhat_3.1.ep6.el6
0:7.3.1-6.Final_redhat_3.1.ep6.el6
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.3.0-1.Final_redhat_1.1.ep6.el6
0:7.3.0-1.Final_redhat_1.1.ep6.el6
netty
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:3.6.7-1.Final_redhat_1.1.ep6.el6
0:3.6.7-1.Final_redhat_1.1.ep6.el6
picketbox
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:4.0.19-2.SP3_redhat_1.1.ep6.el6
0:4.0.19-2.SP3_redhat_1.1.ep6.el6
weld-core
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.1.17-1.Final_redhat_1.1.ep6.el6
0:1.1.17-1.Final_redhat_1.1.ep6.el6
xml-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.5.6-1.redhat_1.1.ep6.el6
0:1.5.6-1.redhat_1.1.ep6.el6
xmltooling
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.3.4-5.redhat_3.1.ep6.el6
0:1.3.4-5.redhat_3.1.ep6.el6

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open