Every CVE Search/ Get API key

CVE-2022-23221

Arbitrary code execution in H2 Console

9.8 CriticalPublic exploitFix available

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

64.8%Up 59.1 points since Feb 8, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
CVE-2022-23221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-88
Updated
2026-11-02
CVE List 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
CVE-2022-23221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-88
Updated
2026-11-02
EUVDEUVD-2022-0440 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
EUVD-2022-0440
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-45hx-wfhj-473x 9.8

Arbitrary code execution in H2 Console

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
GHSA-45hx-wfhj-473x
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-88
Updated
2026-11-02
OSV 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
CVE-2022-23221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-23221 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
DEBIAN-CVE-2022-23221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 10 moreShow less
OSVGHSA-45hx-wfhj-473x 9.8

Arbitrary code execution in H2 Console

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
GHSA-45hx-wfhj-473x
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-88
Updated
2026-11-02
OSVRHSA-2022:4918 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7

Record
RHSA-2022:4918
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:4919 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8

Record
RHSA-2022:4919
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10207 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update

Record
RHSA-2024:10207
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10208 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

Record
RHSA-2024:10208
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-23221 9.8

H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

Record
UBUNTU-CVE-2022-23221
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2025-1763597218 No score

TuxCare security update for com.h2database:h2 (4 CVEs)

TuxCare rebuilt com.h2database:h2 to address 4 CVEs. Fixed in 1.4.200-tuxcare.1.

Record
CLSA-2025-1763597218
Updated
2026-11-02
OSVCLSA-2026-1793128778 No score

TuxCare security update for com.h2database:h2 (1 CVE)

TuxCare rebuilt com.h2database:h2 to address 1 CVE. Fixed in 1.3.176-tuxcare.2.

Record
CLSA-2026-1793128778
Updated
2026-11-02
OSVUSN-5365-1 No score

h2database vulnerabilities

It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392)

It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-23221)

Record
USN-5365-1
Updated
2026-11-02
OSVUSN-6834-1 No score

h2database vulnerabilities

It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-42392)

It was discovered that H2 incorrectly handled some specially crafted connection URLs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-23221)

Record
USN-6834-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.h2database:h2
Maven
 before 2.1.210
2.1.210
com.h2database:h2
TuxCare:Maven
From an advisory covering 4 CVEs
 1.4.200 up to 1.4.200-tuxcare.1
1.4.200-tuxcare.1
com.h2database:h2
TuxCare:Maven
 1.3.176 up to 1.3.176-tuxcare.2, plus listed versions
1.3.176-tuxcare.1
1.3.176-tuxcare.2
h2database
Debian:12
 before 2.1.210-1
2.1.210-1
h2database
Debian:13
 before 2.1.210-1
2.1.210-1
h2database
Debian:14
 before 2.1.210-1
2.1.210-1
h2database
Debian:9
From an advisory covering 2 CVEs
 before 1.4.193-1+deb9u1, plus listed versions
1.4.193-1
1.4.193-1+deb9u1
h2database
Debian:10
From an advisory covering 2 CVEs
 before 1.4.197-4+deb10u1, plus listed versions
1.4.197-4
1.4.197-4+deb10u1
h2database
Debian:11
From an advisory covering 2 CVEs
 before 1.4.197-4+deb11u1, plus listed versions
1.4.197-4
1.4.197-4+deb11u1
com.h2database:h2
Maven
 before 2.1.210, plus listed versions
1.0.200612171.0.200703041.0.200704291.0.200706171.0.57
Show 45 moreShow less
1.0.581.0.591.0.601.0.611.0.621.0.631.0.641.0.651.0.661.0.671.0.681.0.691.0.701.0.711.0.721.0.731.0.741.0.751.0.761.0.771.0.781.0.791.1.1001.1.1011.1.1021.1.1031.1.1041.1.1051.1.1061.1.1071.1.1081.1.1091.1.1101.1.1111.1.1121.1.1131.1.1141.1.1151.1.1161.1.1171.1.1181.1.1191.2.1201.2.1211.2.122
2.1.210
Show 189 moreShow less
Affected packages
PackageAffectedFixed
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.12.6.1-1.redhat_00003.1.el7eap
0:2.12.6.1-1.redhat_00003.1.el7eap
eap7-netty
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-rxtx
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-netty-transport-udt
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el7eap
0:4.1.72-4.Final_redhat_00001.1.el7eap
eap7-h2database
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.4.197-2.redhat_00004.1.el7eap
0:1.4.197-2.redhat_00004.1.el7eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:3.8.7-1.SP1_redhat_00001.1.el7eap
0:3.8.7-1.SP1_redhat_00001.1.el7eap
eap7-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el7eap
0:1.1.11-1.SP1_redhat_00001.1.el7eap
eap7-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el7eap
0:1.1.11-1.SP1_redhat_00001.1.el7eap
eap7-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el7eap
0:1.1.11-1.SP1_redhat_00001.1.el7eap
eap7-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el7eap
0:1.1.11-1.SP1_redhat_00001.1.el7eap
eap7-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el7eap
0:1.1.11-1.SP1_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el7eap
0:7.4.5-3.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el7eap
0:7.4.5-3.GA_redhat_00001.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el7eap
0:7.4.5-3.GA_redhat_00001.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el7eap
0:7.4.5-3.GA_redhat_00001.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el7eap
0:7.4.5-3.GA_redhat_00001.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.2.17-2.SP4_redhat_00001.1.el7eap
0:2.2.17-2.SP4_redhat_00001.1.el7eap
eap7-xerces-j2
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.12.0-3.SP04_redhat_00001.1.el7eap
0:2.12.0-3.SP04_redhat_00001.1.el7eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el7eap
0:2.16.0-9.redhat_00042.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 14 CVEs
 before 0:3.3.12-1.Final_redhat_00001.1.el7eap
0:3.3.12-1.Final_redhat_00001.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.12.6.1-1.redhat_00003.1.el8eap
0:2.12.6.1-1.redhat_00003.1.el8eap
eap7-netty
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-rxtx
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-netty-transport-udt
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:4.1.72-4.Final_redhat_00001.1.el8eap
0:4.1.72-4.Final_redhat_00001.1.el8eap
eap7-h2database
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.4.197-2.redhat_00004.1.el8eap
0:1.4.197-2.redhat_00004.1.el8eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:3.8.7-1.SP1_redhat_00001.1.el8eap
0:3.8.7-1.SP1_redhat_00001.1.el8eap
eap7-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el8eap
0:1.1.11-1.SP1_redhat_00001.1.el8eap
eap7-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el8eap
0:1.1.11-1.SP1_redhat_00001.1.el8eap
eap7-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el8eap
0:1.1.11-1.SP1_redhat_00001.1.el8eap
eap7-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el8eap
0:1.1.11-1.SP1_redhat_00001.1.el8eap
eap7-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:1.1.11-1.SP1_redhat_00001.1.el8eap
0:1.1.11-1.SP1_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el8eap
0:7.4.5-3.GA_redhat_00001.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el8eap
0:7.4.5-3.GA_redhat_00001.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:7.4.5-3.GA_redhat_00001.1.el8eap
0:7.4.5-3.GA_redhat_00001.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.2.17-2.SP4_redhat_00001.1.el8eap
0:2.2.17-2.SP4_redhat_00001.1.el8eap
eap7-xerces-j2
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.12.0-3.SP04_redhat_00001.1.el8eap
0:2.12.0-3.SP04_redhat_00001.1.el8eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:2.16.0-9.redhat_00042.1.el8eap
0:2.16.0-9.redhat_00042.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 14 CVEs
 before 0:3.3.12-1.Final_redhat_00001.1.el8eap
0:3.3.12-1.Final_redhat_00001.1.el8eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-avro
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.6-8.redhat_00003.1.el7eap
0:1.7.6-8.redhat_00003.1.el7eap
eap7-h2database
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.4.197-3.redhat_00004.1.el7eap
0:1.4.197-3.redhat_00004.1.el7eap
eap7-jboss-annotations-api_1.3_spec
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.1-4.Final_redhat_00001.1.el7eap
0:2.0.1-4.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el7eap
0:2.0.15-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el7eap
0:2.0.15-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap6.4
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.3
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.1
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.2-to-eap7.3
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.3-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly10.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly10.1
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly11.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly12.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly13.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly14.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly15.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly16.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly17.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly18.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly8.2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly9.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.7.13-1.Final_redhat_00001.1.el7eap
0:3.7.13-1.Final_redhat_00001.1.el7eap
eap7-log4j-jboss-logmanager
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.2.2-2.Final_redhat_00002.1.el7eap
0:1.2.2-2.Final_redhat_00002.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wss4j
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-bindings
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-policy
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-common
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-dom
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-policy-stax
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-stax
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.7.1-38.redhat_00015.1.el7eap
0:2.7.1-38.redhat_00015.1.el7eap
eap7-xml-security
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.2.3-2.redhat_00001.1.el7eap
0:2.2.3-2.redhat_00001.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-avro
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.7.6-2.redhat_00003.1.ep7.el7
0:1.7.6-2.redhat_00003.1.ep7.el7
eap7-bouncycastle
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-mail
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-h2database
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.4.197-2.redhat_00005.1.ep7.el7
0:1.4.197-2.redhat_00005.1.ep7.el7
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7
0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.ep7.el7
0:2.0.15-1.Final_redhat_00001.1.ep7.el7
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.ep7.el7
0:2.0.15-1.Final_redhat_00001.1.ep7.el7
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.5.10-1.Final_redhat_00001.1.ep7.el7
0:3.5.10-1.Final_redhat_00001.1.ep7.el7
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:7.1.8-2.GA_redhat_00002.1.ep7.el7
0:7.1.8-2.GA_redhat_00002.1.ep7.el7
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:7.1.8-2.GA_redhat_00002.1.ep7.el7
0:7.1.8-2.GA_redhat_00002.1.ep7.el7
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.7.1-26.redhat_00015.1.ep7.el7
0:2.7.1-26.redhat_00015.1.ep7.el7
h2database
Ubuntu:Pro:16.04:LTS
 before 1.4.191-1ubuntu0.1~esm1, plus listed versions
1.4.185-11.4.185-21.4.190-11.4.191-1
1.4.191-1ubuntu0.1~esm1
h2database
Ubuntu:Pro:18.04:LTS
 before 1.4.196-2ubuntu0.1~esm1, plus listed versions
1.4.196-11.4.196-2
1.4.196-2ubuntu0.1~esm1
h2database
Ubuntu:20.04:LTS
 before 1.4.197-4+deb10u1build0.20.04.1, plus listed versions
1.4.197-4
1.4.197-4+deb10u1build0.20.04.1
h2database
Ubuntu:22.04:LTS
 before 2.1.210+really1.4.197-1, plus listed versions
1.4.197-42.1.210-1
2.1.210+really1.4.197-1
h2database
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1.4.197-4+deb10u1build0.20.04.1, plus listed versions
1.4.197-4
1.4.197-4+deb10u1build0.20.04.1
h2database
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 1.4.191-1ubuntu0.1~esm1, plus listed versions
1.4.185-11.4.185-21.4.190-11.4.191-1
1.4.191-1ubuntu0.1~esm1
h2database
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 1.4.196-2ubuntu0.1~esm1, plus listed versions
1.4.196-11.4.196-2
1.4.196-2ubuntu0.1~esm1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubstraightSang/H2-database-CVE-2022-232212026-07-09
PoC in GitHubCyberCTF/vulhub-h2database-cve-2022-232212026-10-08

History

History
RecordedChangedSources
affected, factsOSV
exploitsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23221 is a critical vulnerability (CVSS 9.8) in H2database H2, published January 19, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 64.8%, the 99th percentile. Fixed in com.h2database:h2 2.1.210.

References

Show 184 moreShow less
This page doesn't list everything

Left out here: 81 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open