Every CVE Search/ Get API key

CVE-2019-10221

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where...

4.3 MediumFix available

CVE-2019-10221 is a medium vulnerability (CVSS 4.3) in [unknown] Pki-core, published March 20, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 70th percentile. Fixed in dogtag-pki 10.9.1-1.

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.32%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.3

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
CVE-2019-10221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2019-2234 4.3

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
EUVD-2019-2234
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-wfff-rc4w-hpx2 No score

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where...

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
GHSA-wfff-rc4w-hpx2
Updated
2026-11-02
NVD 4.3

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
CVE-2019-10221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
OSV 6.1

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
CVE-2019-10221
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2019-10221 6.1

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
DEBIAN-CVE-2019-10221
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2020:4847 8.6

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

Record
RHSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2021:0819 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0819
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0851 8.1

Red Hat Security Advisory: pki-core security and bug fix update

Record
RHSA-2021:0851
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0975 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0975
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2020:4847 8.6

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

  • pki: Dogtag's python client does not validate certificates (CVE-2020-15720)

  • pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page (CVE-2019-10146)

  • pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab (CVE-2019-10179)

  • pki-core: Reflected XSS in getcookies?url= endpoint in CA (CVE-2019-10221)

  • pki-core: KRA vulnerable to reflected XSS via the getPk12 page (CVE-2020-1721)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2019-10221 4.3

A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.

Record
UBUNTU-CVE-2019-10221
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dogtag-pki
Debian:11
 before 10.9.1-1
10.9.1-1
apache-commons-collections
Red Hat:enterprise_linux:8::appstream
 before 0:3.2.2-10.module+el8.1.0+3366+6dfb954c
0:3.2.2-10.module+el8.1.0+3366+6dfb954c
apache-commons-lang
Red Hat:enterprise_linux:8::appstream
 before 0:2.6-21.module+el8.1.0+3366+6dfb954c
0:2.6-21.module+el8.1.0+3366+6dfb954c
apache-commons-net
Red Hat:enterprise_linux:8::appstream
 before 0:3.6-3.module+el8.3.0+6805+72837426
0:3.6-3.module+el8.3.0+6805+72837426
bea-stax
Red Hat:enterprise_linux:8::appstream
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
bea-stax-api
Red Hat:enterprise_linux:8::appstream
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
glassfish-fastinfoset
Red Hat:enterprise_linux:8::appstream
 before 0:1.2.13-9.module+el8.1.0+3366+6dfb954c
0:1.2.13-9.module+el8.1.0+3366+6dfb954c
glassfish-jaxb
Red Hat:enterprise_linux:8::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-api
Red Hat:enterprise_linux:8::appstream
 before 0:2.2.12-8.module+el8.1.0+3366+6dfb954c
0:2.2.12-8.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-core
Red Hat:enterprise_linux:8::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
Show 174 moreShow less
Affected packages
PackageAffectedFixed
glassfish-jaxb-runtime
Red Hat:enterprise_linux:8::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-txw2
Red Hat:enterprise_linux:8::appstream
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
jackson-annotations
Red Hat:enterprise_linux:8::appstream
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-core
Red Hat:enterprise_linux:8::appstream
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-databind
Red Hat:enterprise_linux:8::appstream
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-jaxrs-json-provider
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.9-1.module+el8.1.0+3832+9784644d
0:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-jaxrs-providers
Red Hat:enterprise_linux:8::appstream
 before 0:2.9.9-1.module+el8.1.0+3832+9784644d
0:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-module-jaxb-annotations
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.6-4.module+el8.1.0+3366+6dfb954c
0:2.7.6-4.module+el8.1.0+3366+6dfb954c
jakarta-commons-httpclient
Red Hat:enterprise_linux:8::appstream
 before 1:3.1-28.module+el8.1.0+3366+6dfb954c
1:3.1-28.module+el8.1.0+3366+6dfb954c
javassist
Red Hat:enterprise_linux:8::appstream
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
javassist-javadoc
Red Hat:enterprise_linux:8::appstream
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
jss
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-javadoc
Red Hat:enterprise_linux:8::appstream
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
ldapjdk
Red Hat:enterprise_linux:8::appstream
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
ldapjdk-javadoc
Red Hat:enterprise_linux:8::appstream
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
pki-base
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-base-java
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-ca
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-kra
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-server
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-servlet-4.0-api
Red Hat:enterprise_linux:8::appstream
 before 1:9.0.30-1.module+el8.3.0+6730+8f9c6254
1:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-servlet-engine
Red Hat:enterprise_linux:8::appstream
 before 1:9.0.30-1.module+el8.3.0+6730+8f9c6254
1:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-symkey
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-symkey-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-tools
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
python-nss
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-doc
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-pki
Red Hat:enterprise_linux:8::appstream
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
relaxngDatatype
Red Hat:enterprise_linux:8::appstream
 before 0:2011.1-7.module+el8.1.0+3366+6dfb954c
0:2011.1-7.module+el8.1.0+3366+6dfb954c
resteasy
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.26-3.module+el8.2.0+5723+4574fbff
0:3.0.26-3.module+el8.2.0+5723+4574fbff
slf4j
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
slf4j-jdk14
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
stax-ex
Red Hat:enterprise_linux:8::appstream
 before 0:1.7.7-8.module+el8.2.0+5723+4574fbff
0:1.7.7-8.module+el8.2.0+5723+4574fbff
tomcatjss
Red Hat:enterprise_linux:8::appstream
 before 0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
velocity
Red Hat:enterprise_linux:8::appstream
 before 0:1.7-24.module+el8.1.0+3366+6dfb954c
0:1.7-24.module+el8.1.0+3366+6dfb954c
xalan-j2
Red Hat:enterprise_linux:8::appstream
 before 0:2.7.1-38.module+el8.1.0+3366+6dfb954c
0:2.7.1-38.module+el8.1.0+3366+6dfb954c
xerces-j2
Red Hat:enterprise_linux:8::appstream
 before 0:2.11.0-34.module+el8.1.0+3366+6dfb954c
0:2.11.0-34.module+el8.1.0+3366+6dfb954c
xml-commons-apis
Red Hat:enterprise_linux:8::appstream
 before 0:1.4.01-25.module+el8.1.0+3366+6dfb954c
0:1.4.01-25.module+el8.1.0+3366+6dfb954c
xml-commons-resolver
Red Hat:enterprise_linux:8::appstream
 before 0:1.2-26.module+el8.1.0+3366+6dfb954c
0:1.2-26.module+el8.1.0+3366+6dfb954c
xmlstreambuffer
Red Hat:enterprise_linux:8::appstream
 before 0:1.5.4-8.module+el8.2.0+5723+4574fbff
0:1.5.4-8.module+el8.2.0+5723+4574fbff
xsom
Red Hat:enterprise_linux:8::appstream
 before 0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c
0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c
pki-base
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-tools
Red Hat:rhel_eus:7.6::computenode
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-tools
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::server
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::client
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::computenode
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::server
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::workstation
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::computenode
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::server
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.3.0+53+ea062990
0:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-collections
Rocky Linux:8
 before 0:3.2.2-10.module+el8.3.0+74+855e3f5d
0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.3.0+53+ea062990
0:2.6-21.module+el8.3.0+53+ea062990
apache-commons-lang
Rocky Linux:8
 before 0:2.6-21.module+el8.3.0+74+855e3f5d
0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.3.0+53+ea062990
0:3.6-3.module+el8.3.0+53+ea062990
apache-commons-net
Rocky Linux:8
 before 0:3.6-3.module+el8.3.0+74+855e3f5d
0:3.6-3.module+el8.3.0+74+855e3f5d
bea-stax
Rocky Linux:8
 before 0:1.2.0-16.module+el8.3.0+53+ea062990
0:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfoset
Rocky Linux:8
 before 0:1.2.13-9.module+el8.3.0+53+ea062990
0:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxb
Rocky Linux:8
 before 0:2.2.11-11.module+el8.3.0+53+ea062990
0:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-api
Rocky Linux:8
 before 0:2.2.12-8.module+el8.3.0+53+ea062990
0:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotations
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-core
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databind
Rocky Linux:8
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providers
Rocky Linux:8
 before 0:2.9.9-1.module+el8.3.0+53+ea062990
0:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotations
Rocky Linux:8
 before 0:2.7.6-4.module+el8.3.0+53+ea062990
0:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.3.0+53+ea062990
1:3.1-28.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
 before 1:3.1-28.module+el8.3.0+74+855e3f5d
1:3.1-28.module+el8.3.0+74+855e3f5d
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.3.0+53+ea062990
0:3.18.1-8.module+el8.3.0+53+ea062990
javassist
Rocky Linux:8
 before 0:3.18.1-8.module+el8.3.0+74+855e3f5d
0:3.18.1-8.module+el8.3.0+74+855e3f5d
ldapjdk
Rocky Linux:8
 before 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
pki-servlet-engine
Rocky Linux:8
 before 1:9.0.30-1.module+el8.3.0+53+ea062990
1:9.0.30-1.module+el8.3.0+53+ea062990
python-nss
Rocky Linux:8
 before 0:1.0.1-10.module+el8.3.0+53+ea062990
0:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatype
Rocky Linux:8
 before 0:2011.1-7.module+el8.3.0+53+ea062990
0:2011.1-7.module+el8.3.0+53+ea062990
resteasy
Rocky Linux:8
 before 0:3.0.26-3.module+el8.3.0+53+ea062990
0:3.0.26-3.module+el8.3.0+53+ea062990
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.5.0+697+f586bb30
0:1.7.25-4.module+el8.5.0+697+f586bb30
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.3.0+74+855e3f5d
0:1.7.25-4.module+el8.3.0+74+855e3f5d
slf4j
Rocky Linux:8
 before 0:1.7.25-4.module+el8.3.0+133+b8b54b58
0:1.7.25-4.module+el8.3.0+133+b8b54b58
stax-ex
Rocky Linux:8
 before 0:1.7.7-8.module+el8.3.0+53+ea062990
0:1.7.7-8.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.3.0+53+ea062990
0:1.7-24.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
 before 0:1.7-24.module+el8.3.0+74+855e3f5d
0:1.7-24.module+el8.3.0+74+855e3f5d
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.3.0+53+ea062990
0:2.7.1-38.module+el8.3.0+53+ea062990
xalan-j2
Rocky Linux:8
 before 0:2.7.1-38.module+el8.3.0+74+855e3f5d
0:2.7.1-38.module+el8.3.0+74+855e3f5d
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.3.0+53+ea062990
0:2.11.0-34.module+el8.3.0+53+ea062990
xerces-j2
Rocky Linux:8
 before 0:2.11.0-34.module+el8.3.0+74+855e3f5d
0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.5.0+697+f586bb30
0:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.3.0+74+855e3f5d
0:1.4.01-25.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
 before 0:1.4.01-25.module+el8.3.0+53+ea062990
0:1.4.01-25.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.3.0+53+ea062990
0:1.2-26.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
 before 0:1.2-26.module+el8.3.0+74+855e3f5d
0:1.2-26.module+el8.3.0+74+855e3f5d
xmlstreambuffer
Rocky Linux:8
 before 0:1.5.4-8.module+el8.3.0+53+ea062990
0:1.5.4-8.module+el8.3.0+53+ea062990
xsom
Rocky Linux:8
 before 0:0-19.20110809svn.module+el8.3.0+53+ea062990
0:0-19.20110809svn.module+el8.3.0+53+ea062990
dogtag-pki
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
10.2.6-110.2.6-210.2.6-310.2.6+git20160317-110.2.6+git20160317-1ubuntu0.1~esm1
 None known
dogtag-pki
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.3.5+12-4ubuntu110.3.5+12-510.5.3-310.5.3-410.5.5-1
Show 4 moreShow less
10.6.0~beta2-310.6.0-1ubuntu110.6.0-1ubuntu210.6.0-1ubuntu2+esm1
 None known
dogtag-pki
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
10.7.3-410.8.3-1ubuntu110.8.3-1ubuntu1+esm1
 None known

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 121 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open