Every CVE Search/ Get API key

CVE-2020-25715

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a...

6.1 MediumFix available

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.14%Up 0.7 points since May 29, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
CVE-2020-25715
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
CVE-2020-25715
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2020-18369 No score

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
EUVD-2020-18369
Updated
2026-11-03
GitHub AdvisoriesGHSA-cg99-xqcm-67pf No score

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a...

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
GHSA-cg99-xqcm-67pf
Weakness
CWE-79
Updated
2026-11-02
OSV 6.1

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
CVE-2020-25715
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-25715 6.1

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
DEBIAN-CVE-2020-25715
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVRHSA-2020:4847 8.6

Red Hat Security Advisory: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

Record
RHSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2021:0819 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0819
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0851 8.1

Red Hat Security Advisory: pki-core security and bug fix update

Record
RHSA-2021:0851
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:0975 8.1

Red Hat Security Advisory: pki-core security update

Record
RHSA-2021:0975
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2021:1263 8.1

Red Hat Security Advisory: pki-core:10.6 security and bug fix update

Record
RHSA-2021:1263
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRLSA-2020:4847 8.6

Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update

The Public Key Infrastructure (PKI) Core contains fundamental packages required by Rocky Enterprise Software Foundation Certificate System.

Security Fix(es):

  • jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)

  • bootstrap: XSS in the data-target attribute (CVE-2016-10735)

  • bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)

  • bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)

  • bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)

  • jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)

  • jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)

  • jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023)

  • pki: Dogtag's python client does not validate certificates (CVE-2020-15720)

  • pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page (CVE-2019-10146)

  • pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab (CVE-2019-10179)

  • pki-core: Reflected XSS in getcookies?url= endpoint in CA (CVE-2019-10221)

  • pki-core: KRA vulnerable to reflected XSS via the getPk12 page (CVE-2020-1721)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4847
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2020-25715 6.1

A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity.

Record
UBUNTU-CVE-2020-25715
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUSN-7146-1 No score

dogtag-pki vulnerabilities

Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-7537)

It was discovered that Dogtag PKI did not properly sanitize user input. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2020-25715)

It was discovered that the XML parser did not properly handle entity expansion. A remote attacker could potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. This issue only affected Ubuntu 16.04 LTS. (CVE-2022-2414)

Record
USN-7146-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dogtag-pki
Debian:11
 All versions, plus listed versions
10.10.2-310.10.6-111.0.0-111.0.3-111.0.3-2
Show 6 moreShow less
11.0.3-311.0.3-411.0.6-111.0.6-211.2.1-111.2.1-2
 None known
apache-commons-collections
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:3.2.2-10.module+el8.1.0+3366+6dfb954c
0:3.2.2-10.module+el8.1.0+3366+6dfb954c
apache-commons-lang
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.6-21.module+el8.1.0+3366+6dfb954c
0:2.6-21.module+el8.1.0+3366+6dfb954c
apache-commons-net
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:3.6-3.module+el8.3.0+6805+72837426
0:3.6-3.module+el8.3.0+6805+72837426
bea-stax
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
bea-stax-api
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.2.0-16.module+el8.1.0+3366+6dfb954c
0:1.2.0-16.module+el8.1.0+3366+6dfb954c
glassfish-fastinfoset
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.2.13-9.module+el8.1.0+3366+6dfb954c
0:1.2.13-9.module+el8.1.0+3366+6dfb954c
glassfish-jaxb
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-api
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.2.12-8.module+el8.1.0+3366+6dfb954c
0:2.2.12-8.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
Show 196 moreShow less
Affected packages
PackageAffectedFixed
glassfish-jaxb-runtime
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
glassfish-jaxb-txw2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.1.0+3366+6dfb954c
0:2.2.11-11.module+el8.1.0+3366+6dfb954c
jackson-annotations
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-databind
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.2.0+5059+3eb3af25
0:2.10.0-1.module+el8.2.0+5059+3eb3af25
jackson-jaxrs-json-provider
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.9.9-1.module+el8.1.0+3832+9784644d
0:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-jaxrs-providers
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.9.9-1.module+el8.1.0+3832+9784644d
0:2.9.9-1.module+el8.1.0+3832+9784644d
jackson-module-jaxb-annotations
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.7.6-4.module+el8.1.0+3366+6dfb954c
0:2.7.6-4.module+el8.1.0+3366+6dfb954c
jakarta-commons-httpclient
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 1:3.1-28.module+el8.1.0+3366+6dfb954c
1:3.1-28.module+el8.1.0+3366+6dfb954c
javassist
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
javassist-javadoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.1.0+3366+6dfb954c
0:3.18.1-8.module+el8.1.0+3366+6dfb954c
jss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
jss-javadoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.7.3-1.module+el8.3.0+8058+d5cd4219
0:4.7.3-1.module+el8.3.0+8058+d5cd4219
ldapjdk
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
ldapjdk-javadoc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
0:4.22.0-1.module+el8.3.0+6784+6e1e4c62
pki-base
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-base-java
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-ca
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-core-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-kra
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-server
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-servlet-4.0-api
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 1:9.0.30-1.module+el8.3.0+6730+8f9c6254
1:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-servlet-engine
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 1:9.0.30-1.module+el8.3.0+6730+8f9c6254
1:9.0.30-1.module+el8.3.0+6730+8f9c6254
pki-symkey
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-symkey-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
pki-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
python-nss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python-nss-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-nss-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.1.0+3366+6dfb954c
0:1.0.1-10.module+el8.1.0+3366+6dfb954c
python3-pki
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:10.9.4-1.module+el8.3.0+8058+d5cd4219
0:10.9.4-1.module+el8.3.0+8058+d5cd4219
relaxngDatatype
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2011.1-7.module+el8.1.0+3366+6dfb954c
0:2011.1-7.module+el8.1.0+3366+6dfb954c
resteasy
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:3.0.26-3.module+el8.2.0+5723+4574fbff
0:3.0.26-3.module+el8.2.0+5723+4574fbff
slf4j
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
slf4j-jdk14
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.1.0+3366+6dfb954c
0:1.7.25-4.module+el8.1.0+3366+6dfb954c
stax-ex
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.7.7-8.module+el8.2.0+5723+4574fbff
0:1.7.7-8.module+el8.2.0+5723+4574fbff
tomcatjss
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
0:7.5.0-1.module+el8.3.0+7355+c59bcbd9
velocity
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.7-24.module+el8.1.0+3366+6dfb954c
0:1.7-24.module+el8.1.0+3366+6dfb954c
xalan-j2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.7.1-38.module+el8.1.0+3366+6dfb954c
0:2.7.1-38.module+el8.1.0+3366+6dfb954c
xerces-j2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:2.11.0-34.module+el8.1.0+3366+6dfb954c
0:2.11.0-34.module+el8.1.0+3366+6dfb954c
xml-commons-apis
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.1.0+3366+6dfb954c
0:1.4.01-25.module+el8.1.0+3366+6dfb954c
xml-commons-resolver
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.2-26.module+el8.1.0+3366+6dfb954c
0:1.2-26.module+el8.1.0+3366+6dfb954c
xmlstreambuffer
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:1.5.4-8.module+el8.2.0+5723+4574fbff
0:1.5.4-8.module+el8.2.0+5723+4574fbff
xsom
Red Hat:enterprise_linux:8::appstream
From an advisory covering 17 CVEs
 before 0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c
0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c
pki-base
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-tools
Red Hat:rhel_eus:7.6::computenode
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base-java
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-ca
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-core-debuginfo
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-kra
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-server
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-symkey
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-tools
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-javadoc
Red Hat:rhel_eus:7.6::server
From an advisory covering 6 CVEs
 before 0:10.5.9-15.el7_6
0:10.5.9-15.el7_6
pki-base
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::server
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base-java
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-ca
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-core-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-kra
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-server
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-symkey
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-javadoc
Red Hat:enterprise_linux:7::workstation
From an advisory covering 7 CVEs
 before 0:10.5.18-12.el7_9
0:10.5.18-12.el7_9
pki-base
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::computenode
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-base-java
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-ca
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-core-debuginfo
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-kra
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-server
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-symkey
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-tools
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
pki-javadoc
Red Hat:rhel_eus:7.7::server
From an advisory covering 6 CVEs
 before 0:10.5.16-7.el7_7
0:10.5.16-7.el7_7
jss
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
jss-javadoc
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.6.2-12.module+el8.2.0+10554+cf83aa72
0:4.6.2-12.module+el8.2.0+10554+cf83aa72
ldapjdk
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.21.0-2.module+el8.2.0+6294+b7db4606
0:4.21.0-2.module+el8.2.0+6294+b7db4606
ldapjdk-javadoc
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:4.21.0-2.module+el8.2.0+6294+b7db4606
0:4.21.0-2.module+el8.2.0+6294+b7db4606
pki-base
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-base-java
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-ca
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-core-debugsource
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-kra
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-server
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-symkey
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-symkey-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-tools
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
pki-tools-debuginfo
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
python3-pki
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:10.8.3-6.module+el8.2.0+10554+cf83aa72
0:10.8.3-6.module+el8.2.0+10554+cf83aa72
tomcatjss
Red Hat:rhel_eus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:7.4.1-2.module+el8.2.0+6294+b7db4606
0:7.4.1-2.module+el8.2.0+6294+b7db4606
apache-commons-collections
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.2.2-10.module+el8.3.0+53+ea062990
0:3.2.2-10.module+el8.3.0+53+ea062990
apache-commons-collections
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.2.2-10.module+el8.3.0+74+855e3f5d
0:3.2.2-10.module+el8.3.0+74+855e3f5d
apache-commons-lang
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.6-21.module+el8.3.0+53+ea062990
0:2.6-21.module+el8.3.0+53+ea062990
apache-commons-lang
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.6-21.module+el8.3.0+74+855e3f5d
0:2.6-21.module+el8.3.0+74+855e3f5d
apache-commons-net
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.6-3.module+el8.3.0+53+ea062990
0:3.6-3.module+el8.3.0+53+ea062990
apache-commons-net
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.6-3.module+el8.3.0+74+855e3f5d
0:3.6-3.module+el8.3.0+74+855e3f5d
bea-stax
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2.0-16.module+el8.3.0+53+ea062990
0:1.2.0-16.module+el8.3.0+53+ea062990
glassfish-fastinfoset
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2.13-9.module+el8.3.0+53+ea062990
0:1.2.13-9.module+el8.3.0+53+ea062990
glassfish-jaxb
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.2.11-11.module+el8.3.0+53+ea062990
0:2.2.11-11.module+el8.3.0+53+ea062990
glassfish-jaxb-api
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.2.12-8.module+el8.3.0+53+ea062990
0:2.2.12-8.module+el8.3.0+53+ea062990
jackson-annotations
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-core
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-databind
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.10.0-1.module+el8.3.0+53+ea062990
0:2.10.0-1.module+el8.3.0+53+ea062990
jackson-jaxrs-providers
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.9.9-1.module+el8.3.0+53+ea062990
0:2.9.9-1.module+el8.3.0+53+ea062990
jackson-module-jaxb-annotations
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.6-4.module+el8.3.0+53+ea062990
0:2.7.6-4.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:3.1-28.module+el8.3.0+53+ea062990
1:3.1-28.module+el8.3.0+53+ea062990
jakarta-commons-httpclient
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:3.1-28.module+el8.3.0+74+855e3f5d
1:3.1-28.module+el8.3.0+74+855e3f5d
javassist
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.3.0+53+ea062990
0:3.18.1-8.module+el8.3.0+53+ea062990
javassist
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.18.1-8.module+el8.3.0+74+855e3f5d
0:3.18.1-8.module+el8.3.0+74+855e3f5d
ldapjdk
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
0:4.22.0-1.module+el8.4.0+418+b7ae1d4a
pki-servlet-engine
Rocky Linux:8
From an advisory covering 17 CVEs
 before 1:9.0.30-1.module+el8.3.0+53+ea062990
1:9.0.30-1.module+el8.3.0+53+ea062990
python-nss
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.0.1-10.module+el8.3.0+53+ea062990
0:1.0.1-10.module+el8.3.0+53+ea062990
relaxngDatatype
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2011.1-7.module+el8.3.0+53+ea062990
0:2011.1-7.module+el8.3.0+53+ea062990
resteasy
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:3.0.26-3.module+el8.3.0+53+ea062990
0:3.0.26-3.module+el8.3.0+53+ea062990
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.5.0+697+f586bb30
0:1.7.25-4.module+el8.5.0+697+f586bb30
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.3.0+74+855e3f5d
0:1.7.25-4.module+el8.3.0+74+855e3f5d
slf4j
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.25-4.module+el8.3.0+133+b8b54b58
0:1.7.25-4.module+el8.3.0+133+b8b54b58
stax-ex
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7.7-8.module+el8.3.0+53+ea062990
0:1.7.7-8.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7-24.module+el8.3.0+53+ea062990
0:1.7-24.module+el8.3.0+53+ea062990
velocity
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.7-24.module+el8.3.0+74+855e3f5d
0:1.7-24.module+el8.3.0+74+855e3f5d
xalan-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.1-38.module+el8.3.0+53+ea062990
0:2.7.1-38.module+el8.3.0+53+ea062990
xalan-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.7.1-38.module+el8.3.0+74+855e3f5d
0:2.7.1-38.module+el8.3.0+74+855e3f5d
xerces-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.11.0-34.module+el8.3.0+53+ea062990
0:2.11.0-34.module+el8.3.0+53+ea062990
xerces-j2
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:2.11.0-34.module+el8.3.0+74+855e3f5d
0:2.11.0-34.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.5.0+697+f586bb30
0:1.4.01-25.module+el8.5.0+697+f586bb30
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.3.0+74+855e3f5d
0:1.4.01-25.module+el8.3.0+74+855e3f5d
xml-commons-apis
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.4.01-25.module+el8.3.0+53+ea062990
0:1.4.01-25.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2-26.module+el8.3.0+53+ea062990
0:1.2-26.module+el8.3.0+53+ea062990
xml-commons-resolver
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.2-26.module+el8.3.0+74+855e3f5d
0:1.2-26.module+el8.3.0+74+855e3f5d
xmlstreambuffer
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:1.5.4-8.module+el8.3.0+53+ea062990
0:1.5.4-8.module+el8.3.0+53+ea062990
xsom
Rocky Linux:8
From an advisory covering 17 CVEs
 before 0:0-19.20110809svn.module+el8.3.0+53+ea062990
0:0-19.20110809svn.module+el8.3.0+53+ea062990
dogtag-pki
Ubuntu:Pro:16.04:LTS
 before 10.2.6+git20160317-1ubuntu0.1~esm1, plus listed versions
10.2.6-110.2.6-210.2.6-310.2.6+git20160317-1
10.2.6+git20160317-1ubuntu0.1~esm1
dogtag-pki
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
10.3.5+12-4ubuntu110.3.5+12-510.5.3-310.5.3-410.5.5-1
Show 4 moreShow less
10.6.0~beta2-310.6.0-1ubuntu110.6.0-1ubuntu210.6.0-1ubuntu2+esm1
 None known
dogtag-pki
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
10.7.3-410.8.3-1ubuntu110.8.3-1ubuntu1+esm1
 None known
dogtag-pki
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 10.2.6+git20160317-1ubuntu0.1~esm1, plus listed versions
10.2.6-110.2.6-210.2.6-310.2.6+git20160317-1
10.2.6+git20160317-1ubuntu0.1~esm1
dogtag-pki
Ubuntu:Pro:22.04:LTS
From an advisory covering 3 CVEs
 before 11.0.0-1ubuntu0.1~esm1, plus listed versions
10.10.2-3build111.0.0-1
11.0.0-1ubuntu0.1~esm1

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-25715 is a medium vulnerability (CVSS 6.1) in [unknown] Pki-core, published November 3, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.14%, the 66th percentile. Fixed in dogtag-pki 10.2.6+git20160317-1ubuntu0.1~esm1.

References

Show 125 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open