Every CVE Search/ Get API key

CVE-2025-35036

hibernate-validator insecure default Expression Language interpolation

6.9 MediumFix available

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.78%Up 0.7 points since Jun 4, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.9

hibernate-validator insecure default Expression Language interpolation

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
CVE-2025-35036
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-94
Updated
2026-11-02
EUVDEUVD-2025-16774 6.9

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
EUVD-2025-16774
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-7v6m-28jr-rg84 6.9

Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
GHSA-7v6m-28jr-rg84
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-94
Updated
2026-11-02
NVD 6.9

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
CVE-2025-35036
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-94
Updated
2026-11-02
OSV 6.9

hibernate-validator insecure default Expression Language interpolation

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
CVE-2025-35036
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-94
Updated
2026-11-02
OSVDEBIAN-CVE-2025-35036 6.9

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
DEBIAN-CVE-2025-35036
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 7 moreShow less
OSVGHSA-7v6m-28jr-rg84 6.9

Hibernate Validator may interpolate user-supplied input in a constraint violation message with Expression Language

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
GHSA-7v6m-28jr-rg84
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-94
Updated
2026-11-02
OSVRHSA-2025:10924 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

Record
RHSA-2025:10924
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10925 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

Record
RHSA-2025:10925
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10926 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update

Record
RHSA-2025:10926
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-35036 6.9

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as of 6.2.0 and 7.0.0 no longer interpolates custom constraint violation messages with Expression Language and strongly recommends not allowing user-supplied input in constraint violation messages. CVE-2020-5245 and CVE-2025-4428 are examples of related, downstream vulnerabilities involving Expression Language intepolation of user-supplied data.

Record
UBUNTU-CVE-2025-35036
CVSS 4.0
6.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVCLSA-2026-1773965923 No score

TuxCare security update for org.hibernate:hibernate-validator (2 CVEs)

TuxCare rebuilt org.hibernate:hibernate-validator to address 2 CVEs. Fixed in 5.4.3.Final-tuxcare.2.

Record
CLSA-2026-1773965923
Updated
2026-11-02
OSVCLSA-2026-1793730043 No score

TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 6.0.17.Final-tuxcare.4.

Record
CLSA-2026-1793730043
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.hibernate.validator:hibernate-validator
Maven
 before 6.2.0.CR1
6.2.0.CR1
org.hibernate.validator:hibernate-validator
Maven
 7.0.0.Alpha1 up to 7.0.0.CR1
7.0.0.CR1
org.hibernate:hibernate-validator
Maven
 before 6.2.0.CR1
6.2.0.CR1
org.hibernate:hibernate-validator
Maven
 7.0.0.Alpha1 up to 7.0.0.CR1
7.0.0.CR1
org.hibernate:hibernate-validator
TuxCare:Maven
From an advisory covering 2 CVEs
 5.4.3.Final up to 5.4.3.Final-tuxcare.2, plus listed versions
5.4.3.Final-tuxcare.1
5.4.3.Final-tuxcare.2
org.hibernate.validator:hibernate-validator
TuxCare:Maven
 6.0.17.Final up to 6.0.17.Final-tuxcare.4, plus listed versions
6.0.17.Final-tuxcare.16.0.17.Final-tuxcare.26.0.17.Final-tuxcare.3
6.0.17.Final-tuxcare.4
org.hibernate:hibernate-validator
TuxCare:Maven
 6.0.17.Final up to 6.0.17.Final-tuxcare.4, plus listed versions
6.0.17.Final-tuxcare.16.0.17.Final-tuxcare.26.0.17.Final-tuxcare.3
6.0.17.Final-tuxcare.4
libhibernate-validator-java
Debian:12
 All versions, plus listed versions
5.3.6-25.3.6-3
 None known
libhibernate-validator-java
Debian:13
 All versions, plus listed versions
5.3.6-3
 None known
libhibernate-validator-java
Debian:14
 All versions, plus listed versions
5.3.6-3
 None known
Show 168 moreShow less
Affected packages
PackageAffectedFixed
libhibernate-validator4-java
Debian:12
 All versions, plus listed versions
4.3.4-7
 None known
libhibernate-validator4-java
Debian:13
 All versions, plus listed versions
4.3.4-7
 None known
libhibernate-validator4-java
Debian:14
 All versions, plus listed versions
4.3.4-7
 None known
org.hibernate.validator:hibernate-validator
Maven
 before 6.2.0.CR1, plus listed versions
6.0.0.Alpha16.0.0.Alpha26.0.0.Beta16.0.0.Beta26.0.0.CR1
Show 40 moreShow less
6.0.0.CR26.0.0.CR36.0.0.Final6.0.1.Final6.0.10.Final6.0.11.Final6.0.12.Final6.0.13.Final6.0.14.Final6.0.15.Final6.0.16.Final6.0.17.Final6.0.18.Final6.0.19.Final6.0.2.Final6.0.20.Final6.0.21.Final6.0.22.Final6.0.23.Final6.0.3.Final6.0.4.Final6.0.5.Final6.0.6.Final6.0.7.Final6.0.8.Final6.0.9.Final6.1.0.Alpha16.1.0.Alpha26.1.0.Alpha36.1.0.Alpha46.1.0.Alpha56.1.0.Alpha66.1.0.Final6.1.1.Final6.1.2.Final6.1.3.Final6.1.4.Final6.1.5.Final6.1.6.Final6.1.7.Final
6.2.0.CR1
org.hibernate.validator:hibernate-validator
Maven
 7.0.0.Alpha1 up to 7.0.0.CR1, plus listed versions
7.0.0.Alpha27.0.0.Alpha37.0.0.Alpha47.0.0.Alpha57.0.0.Alpha6
7.0.0.CR1
org.hibernate:hibernate-validator
Maven
 before 6.2.0.CR1, plus listed versions
3.0.0.GA3.0.0.ga3.1.0.CR13.1.0.CR23.1.0.GA
Show 45 moreShow less
4.0.0.Alpha14.0.0.Alpha24.0.0.Alpha34.0.0.Beta14.0.0.Beta24.0.0.Beta34.0.0.CR14.0.0.GA4.0.1.GA4.0.2.GA4.1.0.Beta14.1.0.Beta24.1.0.CR14.1.0.Final4.2.0.Beta14.2.0.Beta24.2.0.CR14.2.0.Final4.3.0.Alpha14.3.0.Beta14.3.0.CR14.3.0.Final4.3.1.Final4.3.2.Final5.0.0.Alpha15.0.0.Alpha25.0.0.Beta15.0.0.CR15.0.0.CR25.0.0.CR35.0.0.CR45.0.0.CR55.0.0.Final5.0.1.Final5.0.2.Final5.0.3.Final5.1.0.Alpha15.1.0.Beta15.1.0.CR15.1.0.Final5.1.1.Final5.1.2.Final5.1.3.Final5.2.0.Alpha15.2.0.Beta1
6.2.0.CR1
org.hibernate:hibernate-validator
Maven
 7.0.0.Alpha1 up to 7.0.0.CR1, plus listed versions
7.0.0.Alpha27.0.0.Alpha37.0.0.Alpha47.0.0.Alpha57.0.0.Alpha6
7.0.0.CR1
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el7eap
0:2.16.0-21.redhat_00055.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el7eap
0:3.5.10-1.redhat_00001.1.el7eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el7eap
0:3.5.10-1.redhat_00001.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el7eap
0:3.5.10-1.redhat_00001.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el7eap
0:3.5.10-1.redhat_00001.1.el7eap
eap7-artemis-native
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el7eap
1:1.0.2-5.redhat_00004.1.el7eap
eap7-artemis-native-debuginfo
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el7eap
1:1.0.2-5.redhat_00004.1.el7eap
eap7-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el7eap
1:1.0.2-5.redhat_00004.1.el7eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el7eap
0:1.9.6-1.Final_redhat_00001.1.el7eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:2.3.14-9.SP10_redhat_00001.1.el7eap
0:2.3.14-9.SP10_redhat_00001.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:3.3.27-1.Final_redhat_00001.1.el7eap
0:3.3.27-1.Final_redhat_00001.1.el7eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el7eap
0:6.0.23-3.SP2_redhat_00001.1.el7eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el7eap
0:6.0.23-3.SP2_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el7eap
0:1.5.21-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el7eap
0:1.10.0-42.Final_redhat_00042.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el7eap
0:1.10.0-42.Final_redhat_00042.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el7eap
0:1.10.0-42.Final_redhat_00042.1.el7eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:5.4.15-1.Final_redhat_00001.1.el7eap
0:5.4.15-1.Final_redhat_00001.1.el7eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el7eap
0:1.9.6-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el7eap
0:7.4.23-3.GA_redhat_00002.1.el7eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el7eap
0:1.15.26-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el7eap
0:1.15.26-1.Final_redhat_00001.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el7eap
0:7.4.23-3.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el7eap
0:7.4.23-3.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el7eap
0:7.4.23-3.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el7eap
0:7.4.23-3.GA_redhat_00002.1.el7eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el8eap
0:2.16.0-21.redhat_00055.1.el8eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el8eap
0:3.5.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el8eap
0:3.5.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el8eap
0:3.5.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el8eap
0:3.5.10-1.redhat_00001.1.el8eap
eap7-artemis-native
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el8eap
1:1.0.2-5.redhat_00004.1.el8eap
eap7-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el8eap
1:1.0.2-5.redhat_00004.1.el8eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el8eap
0:1.9.6-1.Final_redhat_00001.1.el8eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:2.3.14-9.SP10_redhat_00001.1.el8eap
0:2.3.14-9.SP10_redhat_00001.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:3.3.27-1.Final_redhat_00001.1.el8eap
0:3.3.27-1.Final_redhat_00001.1.el8eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el8eap
0:6.0.23-3.SP2_redhat_00001.1.el8eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el8eap
0:6.0.23-3.SP2_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el8eap
0:1.5.21-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el8eap
0:1.10.0-42.Final_redhat_00042.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el8eap
0:1.10.0-42.Final_redhat_00042.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el8eap
0:1.10.0-42.Final_redhat_00042.1.el8eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:5.4.15-1.Final_redhat_00001.1.el8eap
0:5.4.15-1.Final_redhat_00001.1.el8eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el8eap
0:1.9.6-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el8eap
0:1.15.26-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el8eap
0:1.15.26-1.Final_redhat_00001.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el8eap
0:7.4.23-3.GA_redhat_00002.1.el8eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.16.0-21.redhat_00055.1.el9eap
0:2.16.0-21.redhat_00055.1.el9eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el9eap
0:3.5.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el9eap
0:3.5.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el9eap
0:3.5.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:3.5.10-1.redhat_00001.1.el9eap
0:3.5.10-1.redhat_00001.1.el9eap
eap7-artemis-native
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el9eap
1:1.0.2-5.redhat_00004.1.el9eap
eap7-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 1:1.0.2-5.redhat_00004.1.el9eap
1:1.0.2-5.redhat_00004.1.el9eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el9eap
0:1.9.6-1.Final_redhat_00001.1.el9eap
eap7-glassfish-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:2.3.14-9.SP10_redhat_00001.1.el9eap
0:2.3.14-9.SP10_redhat_00001.1.el9eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:3.3.27-1.Final_redhat_00001.1.el9eap
0:3.3.27-1.Final_redhat_00001.1.el9eap
eap7-hibernate-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el9eap
0:6.0.23-3.SP2_redhat_00001.1.el9eap
eap7-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:6.0.23-3.SP2_redhat_00001.1.el9eap
0:6.0.23-3.SP2_redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.5.21-1.Final_redhat_00001.1.el9eap
0:1.5.21-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el9eap
0:1.10.0-42.Final_redhat_00042.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el9eap
0:1.10.0-42.Final_redhat_00042.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.10.0-42.Final_redhat_00042.1.el9eap
0:1.10.0-42.Final_redhat_00042.1.el9eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:5.4.15-1.Final_redhat_00001.1.el9eap
0:5.4.15-1.Final_redhat_00001.1.el9eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.9.6-1.Final_redhat_00001.1.el9eap
0:1.9.6-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el9eap
0:1.15.26-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:1.15.26-1.Final_redhat_00001.1.el9eap
0:1.15.26-1.Final_redhat_00001.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 7 CVEs
 before 0:7.4.23-3.GA_redhat_00002.1.el9eap
0:7.4.23-3.GA_redhat_00002.1.el9eap
libhibernate-validator-java
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.2.1-2
 None known
libhibernate-validator-java
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.3.3-24.3.3-34.3.3-44.3.4-1~18.04.1
 None known
libhibernate-validator-java
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.3.4-15.3.6-1
 None known
libhibernate-validator4-java
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.3.4-4~20.04.1
 None known
libhibernate-validator-java
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.3.6-1
 None known
libhibernate-validator4-java
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.3.4-4
 None known
libhibernate-validator-java
Ubuntu:24.04:LTS
 All versions, plus listed versions
5.3.6-2
 None known
libhibernate-validator4-java
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.3.4-7
 None known
libhibernate-validator-java
Ubuntu:25.10
 All versions, plus listed versions
5.3.6-3
 None known
libhibernate-validator4-java
Ubuntu:25.10
 All versions, plus listed versions
4.3.4-7
 None known
libhibernate-validator-java
Ubuntu:26.10
 All versions, plus listed versions
5.3.6-3
 None known
libhibernate-validator4-java
Ubuntu:26.10
 All versions, plus listed versions
4.3.4-7
 None known
libhibernate-validator-java
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.3.6-3
 None known
libhibernate-validator4-java
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.3.4-7
 None known

History

History
RecordedChangedSources
affected
affected, aliases, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-35036 is a medium vulnerability (CVSS 6.9) in Hibernate Validator, published June 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. Fixed in org.hibernate.validator:hibernate-validator 6.2.0.CR1.

References

Show 72 moreShow less
This page doesn't list everything

Left out here: 67 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open