Skip to content

CVE-2023-44483

Apache Santuario: Private Key disclosure in debug-log output

6.5 MediumFix available

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.55%Up 1.5 points since Oct 21, 2023

What each source reports

NVD Score used 6.5

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: CVE-2023-44483
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-532
Updated: 2026-11-02

CVE List No score

Apache Santuario: Private Key disclosure in debug-log output

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: CVE-2023-44483
Weakness: CWE-532
Updated: 2026-11-02

EUVDEUVD-2023-2836 No score

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: EUVD-2023-2836
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xfrj-6vvc-3xm2 6.5

Apache Santuario - XML Security for Java are vulnerable to private key disclosure

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: GHSA-xfrj-6vvc-3xm2
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-532
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-44483 6.5

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: DEBIAN-CVE-2023-44483
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVGHSA-xfrj-6vvc-3xm2 6.5

Apache Santuario - XML Security for Java are vulnerable to private key disclosure

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: GHSA-xfrj-6vvc-3xm2
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-532
Updated: 2026-11-02

Show 16 moreShow less

OSVOESA-2025-2380 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2380
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2025-2381 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2381
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2025-2382 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2382
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2025-2383 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2383
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2025-2384 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2384
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2025-2385 6.5

xml-security security update

The XML Security project is aimed at providing implementation of security standards for XML. Currently the focus is on the W3C standards : - XML-Signature Syntax and Processing; and - XML Encryption Syntax and Processing.

Security Fix(es):

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.(CVE-2023-44483)

Record: OESA-2025-2385
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:0710 6.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

Record: RHSA-2024:0710
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:0711 6.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

Record: RHSA-2024:0711
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:0712 6.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 security update

Record: RHSA-2024:0712
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVRHSA-2024:0798 7.1

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 7

Record: RHSA-2024:0798
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Updated: 2026-11-02

OSVRHSA-2024:0799 7.1

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 8

Record: RHSA-2024:0799
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Updated: 2026-11-02

OSVRHSA-2024:0800 7.1

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.7 security update on RHEL 9

Record: RHSA-2024:0800
CVSS 3.1: 7.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-44483 6.5

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: UBUNTU-CVE-2023-44483
CVSS 3.1: 6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVCLSA-2024-1727136003 No score

TuxCare security update for org.apache.santuario:xmlsec (1 CVE)

TuxCare rebuilt org.apache.santuario:xmlsec to address 1 CVE. Fixed in 2.3.1.tuxcare.

Record: CLSA-2024-1727136003
Updated: 2026-11-02

OSVCLSA-2024-1733184025 No score

TuxCare security update for org.apache.santuario:xmlsec (3 CVEs)

TuxCare rebuilt org.apache.santuario:xmlsec to address 3 CVEs. Fixed in 2.0.10.tuxcare.

Record: CLSA-2024-1733184025
Updated: 2026-11-02

OSV No score

Apache Santuario: Private Key disclosure in debug-log output

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.

Record: CVE-2023-44483
Weakness: CWE-532
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`org.apache.santuario:xmlsec` Maven	2.3.0 up to 2.3.4	2.3.4
`org.apache.santuario:xmlsec` Maven	before 2.2.6	2.2.6
`org.apache.santuario:xmlsec` Maven	3.0.0 up to 3.0.3	3.0.3
`org.apache.santuario:xmlsec` TuxCare:Maven	2.3.1 up to 2.3.1.tuxcare	2.3.1.tuxcare
`org.apache.santuario:xmlsec` TuxCare:Maven From an advisory covering 3 CVEs	2.0.10 up to 2.0.10.tuxcare	2.0.10.tuxcare
`libxml-security-java` Debian:12	before 2.1.7-3+deb12u1, plus listed versions 2.1.7-3	2.1.7-3+deb12u1
`libxml-security-java` Debian:13	before 2.1.8-1.1~deb13u1, plus listed versions 2.1.8-1	2.1.8-1.1~deb13u1
`libxml-security-java` Debian:14	before 2.1.8-1.1, plus listed versions 2.1.8-12.1.8-1.1~deb13u1	2.1.8-1.1
`org.apache.santuario:xmlsec` Maven	2.3.0 up to 2.3.4, plus listed versions 2.3.12.3.22.3.3	2.3.4
`org.apache.santuario:xmlsec` Maven	before 2.2.6, plus listed versions 1.4.01.4.11.4.21.4.31.4.4 Show 41 moreShow less 1.4.51.4.61.4.71.4.81.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5.82.0.02.0.0-beta2.0.0-rc12.0.12.0.102.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.82.2.02.2.12.2.22.2.32.2.42.2.5	2.2.6

Show 184 moreShow less

Affected packages
Package	Affected	Fixed
`org.apache.santuario:xmlsec` Maven	3.0.0 up to 3.0.3, plus listed versions 3.0.13.0.2	3.0.3
`xml-security` openEuler:22.03-LTS-SP4	before 2.3.5-1.oe2203sp4	2.3.5-1.oe2203sp4
`xml-security` openEuler:24.03-LTS	before 2.3.5-1.oe2403	2.3.5-1.oe2403
`xml-security` openEuler:24.03-LTS-SP1	before 2.3.5-1.oe2403sp1	2.3.5-1.oe2403sp1
`xml-security` openEuler:24.03-LTS-SP2	before 2.3.5-1.oe2403sp2	2.3.5-1.oe2403sp2
`xml-security` openEuler:20.03-LTS-SP4	before 2.3.5-1.oe2003sp4	2.3.5-1.oe2003sp4
`xml-security` openEuler:22.03-LTS-SP3	before 2.3.5-1.oe2203sp3	2.3.5-1.oe2203sp3
`eap7-eclipse-jgit` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.13.2-1.SP1_redhat_00001.1.el7eap	0:5.13.2-1.SP1_redhat_00001.1.el7eap
`eap7-insights-java-client` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el7eap	0:1.1.1-1.redhat_00001.1.el7eap
`eap7-glassfish-jsf` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:2.3.14-7.SP08_redhat_00001.1.el7eap	0:2.3.14-7.SP08_redhat_00001.1.el7eap
`eap7-hibernate` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el7eap	0:5.3.33-2.Final_redhat_00001.1.el7eap
`eap7-hibernate-core` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el7eap	0:5.3.33-2.Final_redhat_00001.1.el7eap
`eap7-hibernate-entitymanager` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el7eap	0:5.3.33-2.Final_redhat_00001.1.el7eap
`eap7-hibernate-envers` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el7eap	0:5.3.33-2.Final_redhat_00001.1.el7eap
`eap7-hibernate-java8` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el7eap	0:5.3.33-2.Final_redhat_00001.1.el7eap
`eap7-ironjacamar` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-common-api` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-common-impl` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-common-spi` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-core-api` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-core-impl` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-deployers-common` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-jdbc` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-ironjacamar-validator` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el7eap	0:1.5.16-1.Final_redhat_00001.1.el7eap
`eap7-jboss-cert-helper` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el7eap	0:1.1.1-1.redhat_00001.1.el7eap
`eap7-jboss-cert-helper-debuginfo` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el7eap	0:1.1.1-1.redhat_00001.1.el7eap
`eap7-jboss-msc` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.4.13-1.Final_redhat_00001.1.el7eap	0:1.4.13-1.Final_redhat_00001.1.el7eap
`eap7-jboss-server-migration` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el7eap	0:1.10.0-34.Final_redhat_00033.1.el7eap
`eap7-jboss-server-migration-cli` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el7eap	0:1.10.0-34.Final_redhat_00033.1.el7eap
`eap7-jboss-server-migration-core` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el7eap	0:1.10.0-34.Final_redhat_00033.1.el7eap
`eap7-jbossws-spi` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.4.0-4.Final_redhat_00002.1.el7eap	0:3.4.0-4.Final_redhat_00002.1.el7eap
`eap7-log4j2-jboss-logmanager` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.1.2-1.Final_redhat_00002.1.el7eap	0:1.1.2-1.Final_redhat_00002.1.el7eap
`eap7-protostream` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:4.3.6-1.Final_redhat_00001.1.el7eap	0:4.3.6-1.Final_redhat_00001.1.el7eap
`eap7-resteasy` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-atom-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-cdi` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-client` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-crypto` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jackson-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jackson2-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jaxb-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jaxrs` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jettison-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jose-jwt` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-jsapi` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-json-binding-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-json-p-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-multipart-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-rxjava2` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-spring` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-validator-provider-11` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-resteasy-yaml-provider` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el7eap	0:3.15.9-1.Final_redhat_00001.1.el7eap
`eap7-wildfly` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el7eap	0:7.4.15-2.GA_redhat_00002.1.el7eap
`eap7-wildfly-elytron` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el7eap	0:1.15.21-1.Final_redhat_00001.1.el7eap
`eap7-wildfly-elytron-tool` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el7eap	0:1.15.21-1.Final_redhat_00001.1.el7eap
`eap7-wildfly-java-jdk11` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el7eap	0:7.4.15-2.GA_redhat_00002.1.el7eap
`eap7-wildfly-java-jdk8` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el7eap	0:7.4.15-2.GA_redhat_00002.1.el7eap
`eap7-wildfly-javadocs` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el7eap	0:7.4.15-2.GA_redhat_00002.1.el7eap
`eap7-wildfly-modules` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el7eap	0:7.4.15-2.GA_redhat_00002.1.el7eap
`eap7-wildfly-naming-client` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.0.17-1.Final_redhat_00001.1.el7eap	0:1.0.17-1.Final_redhat_00001.1.el7eap
`eap7-wildfly-transaction-client` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:1.1.17-1.Final_redhat_00001.1.el7eap	0:1.1.17-1.Final_redhat_00001.1.el7eap
`eap7-xml-security` Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs	before 0:2.2.6-1.redhat_00002.1.el7eap	0:2.2.6-1.redhat_00002.1.el7eap
`eap7-eclipse-jgit` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.13.2-1.SP1_redhat_00001.1.el8eap	0:5.13.2-1.SP1_redhat_00001.1.el8eap
`eap7-glassfish-jsf` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:2.3.14-7.SP08_redhat_00001.1.el8eap	0:2.3.14-7.SP08_redhat_00001.1.el8eap
`eap7-hibernate` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el8eap	0:5.3.33-2.Final_redhat_00001.1.el8eap
`eap7-hibernate-core` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el8eap	0:5.3.33-2.Final_redhat_00001.1.el8eap
`eap7-hibernate-entitymanager` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el8eap	0:5.3.33-2.Final_redhat_00001.1.el8eap
`eap7-hibernate-envers` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el8eap	0:5.3.33-2.Final_redhat_00001.1.el8eap
`eap7-hibernate-java8` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el8eap	0:5.3.33-2.Final_redhat_00001.1.el8eap
`eap7-insights-java-client` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el8eap	0:1.1.1-1.redhat_00001.1.el8eap
`eap7-ironjacamar` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-common-api` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-common-impl` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-common-spi` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-core-api` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-core-impl` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-deployers-common` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-jdbc` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-ironjacamar-validator` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el8eap	0:1.5.16-1.Final_redhat_00001.1.el8eap
`eap7-jboss-cert-helper` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el8eap	0:1.1.1-1.redhat_00001.1.el8eap
`eap7-jboss-msc` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.4.13-1.Final_redhat_00001.1.el8eap	0:1.4.13-1.Final_redhat_00001.1.el8eap
`eap7-jboss-server-migration` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el8eap	0:1.10.0-34.Final_redhat_00033.1.el8eap
`eap7-jboss-server-migration-cli` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el8eap	0:1.10.0-34.Final_redhat_00033.1.el8eap
`eap7-jboss-server-migration-core` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el8eap	0:1.10.0-34.Final_redhat_00033.1.el8eap
`eap7-jbossws-spi` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.4.0-4.Final_redhat_00002.1.el8eap	0:3.4.0-4.Final_redhat_00002.1.el8eap
`eap7-log4j2-jboss-logmanager` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.1.2-1.Final_redhat_00002.1.el8eap	0:1.1.2-1.Final_redhat_00002.1.el8eap
`eap7-protostream` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:4.3.6-1.Final_redhat_00001.1.el8eap	0:4.3.6-1.Final_redhat_00001.1.el8eap
`eap7-resteasy` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-atom-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-cdi` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-client` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-crypto` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jackson-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jackson2-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jaxb-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jaxrs` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jettison-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jose-jwt` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-jsapi` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-json-binding-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-json-p-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-multipart-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-rxjava2` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-spring` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-validator-provider-11` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-resteasy-yaml-provider` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el8eap	0:3.15.9-1.Final_redhat_00001.1.el8eap
`eap7-wildfly` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-elytron` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el8eap	0:1.15.21-1.Final_redhat_00001.1.el8eap
`eap7-wildfly-elytron-tool` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el8eap	0:1.15.21-1.Final_redhat_00001.1.el8eap
`eap7-wildfly-java-jdk11` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-java-jdk17` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-java-jdk8` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-javadocs` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-modules` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el8eap	0:7.4.15-2.GA_redhat_00002.1.el8eap
`eap7-wildfly-naming-client` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.0.17-1.Final_redhat_00001.1.el8eap	0:1.0.17-1.Final_redhat_00001.1.el8eap
`eap7-wildfly-transaction-client` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:1.1.17-1.Final_redhat_00001.1.el8eap	0:1.1.17-1.Final_redhat_00001.1.el8eap
`eap7-xml-security` Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs	before 0:2.2.6-1.redhat_00002.1.el8eap	0:2.2.6-1.redhat_00002.1.el8eap
`eap7-eclipse-jgit` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:5.13.2-1.SP1_redhat_00001.1.el9eap	0:5.13.2-1.SP1_redhat_00001.1.el9eap
`eap7-insights-java-client` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el9eap	0:1.1.1-1.redhat_00001.1.el9eap
`eap7-wildfly-elytron` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el9eap	0:1.15.21-1.Final_redhat_00001.1.el9eap
`eap7-wildfly-elytron-tool` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.15.21-1.Final_redhat_00001.1.el9eap	0:1.15.21-1.Final_redhat_00001.1.el9eap
`eap7-glassfish-jsf` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:2.3.14-7.SP08_redhat_00001.1.el9eap	0:2.3.14-7.SP08_redhat_00001.1.el9eap
`eap7-hibernate` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el9eap	0:5.3.33-2.Final_redhat_00001.1.el9eap
`eap7-hibernate-core` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el9eap	0:5.3.33-2.Final_redhat_00001.1.el9eap
`eap7-hibernate-envers` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:5.3.33-2.Final_redhat_00001.1.el9eap	0:5.3.33-2.Final_redhat_00001.1.el9eap
`eap7-ironjacamar` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-common-api` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-common-impl` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-common-spi` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-core-api` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-core-impl` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-deployers-common` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-jdbc` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-ironjacamar-validator` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.5.16-1.Final_redhat_00001.1.el9eap	0:1.5.16-1.Final_redhat_00001.1.el9eap
`eap7-jboss-cert-helper` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.1.1-1.redhat_00001.1.el9eap	0:1.1.1-1.redhat_00001.1.el9eap
`eap7-jboss-msc` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.4.13-1.Final_redhat_00001.1.el9eap	0:1.4.13-1.Final_redhat_00001.1.el9eap
`eap7-jboss-server-migration` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el9eap	0:1.10.0-34.Final_redhat_00033.1.el9eap
`eap7-jboss-server-migration-cli` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el9eap	0:1.10.0-34.Final_redhat_00033.1.el9eap
`eap7-jboss-server-migration-core` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.10.0-34.Final_redhat_00033.1.el9eap	0:1.10.0-34.Final_redhat_00033.1.el9eap
`eap7-jbossws-spi` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.4.0-4.Final_redhat_00002.1.el9eap	0:3.4.0-4.Final_redhat_00002.1.el9eap
`eap7-log4j2-jboss-logmanager` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.1.2-1.Final_redhat_00002.1.el9eap	0:1.1.2-1.Final_redhat_00002.1.el9eap
`eap7-protostream` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:4.3.6-1.Final_redhat_00001.1.el9eap	0:4.3.6-1.Final_redhat_00001.1.el9eap
`eap7-resteasy` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-atom-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-cdi` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-client` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-crypto` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jackson-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jackson2-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jaxb-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jaxrs` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jettison-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jose-jwt` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-jsapi` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-json-binding-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-json-p-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-multipart-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-rxjava2` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-spring` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-validator-provider-11` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-resteasy-yaml-provider` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:3.15.9-1.Final_redhat_00001.1.el9eap	0:3.15.9-1.Final_redhat_00001.1.el9eap
`eap7-wildfly` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-java-jdk11` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-java-jdk17` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-java-jdk8` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-javadocs` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-modules` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:7.4.15-2.GA_redhat_00002.1.el9eap	0:7.4.15-2.GA_redhat_00002.1.el9eap
`eap7-wildfly-naming-client` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.0.17-1.Final_redhat_00001.1.el9eap	0:1.0.17-1.Final_redhat_00001.1.el9eap
`eap7-wildfly-transaction-client` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:1.1.17-1.Final_redhat_00001.1.el9eap	0:1.1.17-1.Final_redhat_00001.1.el9eap
`eap7-xml-security` Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs	before 0:2.2.6-1.redhat_00002.1.el9eap	0:2.2.6-1.redhat_00002.1.el9eap
`rh-sso7-keycloak` Red Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el7sso	0:18.0.12-1.redhat_00001.1.el7sso
`rh-sso7-keycloak-server` Red Hat:red_hat_single_sign_on:7.6::el7 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el7sso	0:18.0.12-1.redhat_00001.1.el7sso
`rh-sso7-keycloak` Red Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el8sso	0:18.0.12-1.redhat_00001.1.el8sso
`rh-sso7-keycloak-server` Red Hat:red_hat_single_sign_on:7.6::el8 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el8sso	0:18.0.12-1.redhat_00001.1.el8sso
`rh-sso7-keycloak` Red Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el9sso	0:18.0.12-1.redhat_00001.1.el9sso
`rh-sso7-keycloak-server` Red Hat:red_hat_single_sign_on:7.6::el9 From an advisory covering 8 CVEs	before 0:18.0.12-1.redhat_00001.1.el9sso	0:18.0.12-1.redhat_00001.1.el9sso
`libxml-security-java` Ubuntu:16.04:LTS	All versions, plus listed versions 1.5.6-1	None known
`libxml-security-java` Ubuntu:18.04:LTS	All versions, plus listed versions 1.5.8-22.0.10-2~18.042.0.10-2~18.04.1	None known
`libxml-security-java` Ubuntu:20.04:LTS	All versions, plus listed versions 2.0.10-22.0.10-2+deb11u1build0.20.04.1	None known
`libxml-security-java` Ubuntu:22.04:LTS	All versions, plus listed versions 2.0.10-22.1.7-12.1.7-2	None known
`libxml-security-java` Ubuntu:24.04:LTS	All versions, plus listed versions 2.1.7-32.1.8-1	None known
`libxml-security-java` Ubuntu:25.10	All versions, plus listed versions 2.1.8-1	None known
`libxml-security-java` Ubuntu:26.10	All versions, plus listed versions 2.1.8-12.1.8-1.1	None known
`libxml-security-java` Ubuntu:26.04:LTS	All versions, plus listed versions 2.1.8-1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-44483 is a medium vulnerability (CVSS 6.5) in Apache Software Foundation Santuario, published October 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. Fixed in org.apache.santuario:xmlsec 2.3.4.

References

Show 78 moreShow less