CVE-2025-48913

Apache CXF: Untrusted JMS configuration can lead to RCE

9.8 CriticalFix available

If untrusted users are allowed to configure JMS for Apache CXF, previously they could use RMI or LDAP URLs, potentially leading to code execution capabilities. This interface is now restricted to reject those protocols, removing this possibility.

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.07%Up 1.0 points since Aug 8, 2025

What each source reports

CVE List Score used 9.8

Apache CXF: Untrusted JMS configuration can lead to RCE

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: CVE-2025-48913
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-20
Updated: 2026-11-02

EUVDEUVD-2025-23982 9.8

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: EUVD-2025-23982
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-g4px-6qhm-hqjm 6.3

Apache CXF: Untrusted JMS configuration can lead to RCE

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: GHSA-g4px-6qhm-hqjm
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Weakness: CWE-20
Updated: 2026-11-02

NVD 9.8

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: CVE-2025-48913
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-20
Updated: 2026-11-02

OSV 9.8

Apache CXF: Untrusted JMS configuration can lead to RCE

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: CVE-2025-48913
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-20
Updated: 2026-11-02

OSVGHSA-g4px-6qhm-hqjm 6.3

Apache CXF: Untrusted JMS configuration can lead to RCE

Users are recommended to upgrade to versions 3.6.8, 4.0.9 or 4.1.3, which fix this issue.

Record: GHSA-g4px-6qhm-hqjm
CVSS 4.0: 6.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Weakness: CWE-20
Updated: 2026-11-02

Show 12 moreShow less

OSVRHSA-2025:17298 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.0 security update

Record: RHSA-2025:17298
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2025:17317 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.9 security update

Record: RHSA-2025:17317
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:4915 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record: RHSA-2026:4915
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:4916 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record: RHSA-2026:4916
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:4917 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record: RHSA-2026:4917
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:6011 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.17 security update

Record: RHSA-2026:6011
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVRHSA-2026:6012 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.14 security update

Record: RHSA-2026:6012
CVSS 3.1: 8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated: 2026-11-02

OSVCLSA-2025-1759795578 No score

TuxCare security update for 206 packages (1 CVE)

TuxCare rebuilt 206 packages to address 1 CVE. Fixed in 3.5.9-tuxcare.2.

Record: CLSA-2025-1759795578
Updated: 2026-11-02

OSVCLSA-2025-1766448496 No score

TuxCare security update for 206 packages (1 CVE)

TuxCare rebuilt 206 packages to address 1 CVE. Fixed in 3.5.11-tuxcare.1.

Record: CLSA-2025-1766448496
Updated: 2026-11-02

OSVCLSA-2026-1776040410 No score

TuxCare security update for org.apache.cxf (6 CVEs)

TuxCare rebuilt 5 org.apache.cxf packages to address 6 CVEs. Fixed in 3.4.5-tuxcare.1.

Record: CLSA-2026-1776040410
Updated: 2026-11-02

OSVCLSA-2026-1792763998 No score

TuxCare security update for org.apache.cxf:cxf-rt-transports-jms (2 CVEs)

TuxCare rebuilt org.apache.cxf:cxf-rt-transports-jms to address 2 CVEs. Fixed in 3.5.9-tuxcare.10.

Record: CLSA-2026-1792763998
Updated: 2026-11-02

OSVCLSA-2026-1792778277 No score

TuxCare security update for org.apache.cxf:cxf-rt-transports-jms (2 CVEs)

TuxCare rebuilt org.apache.cxf:cxf-rt-transports-jms to address 2 CVEs. Fixed in 3.5.11-tuxcare.10.

Record: CLSA-2026-1792778277
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`org.apache.cxf:cxf-rt-transports-jms` Maven	before 3.6.8	3.6.8
`org.apache.cxf:cxf-rt-transports-jms` Maven	4.0.0 up to 4.0.9	4.0.9
`org.apache.cxf:cxf-rt-transports-jms` Maven	4.1.0 up to 4.1.3	4.1.3
`org.apache.cxf.archetype:cxf-jaxrs-service` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.archetype:cxf-jaxws-javafirst` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.archetype:cxf-jaxws-wsdlfirst` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.karaf:apache-cxf` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.karaf:cxf-karaf-commands` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.karaf:karaf-parent` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.osgi.itests:org.apache.cxf.osgi.itests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`org.apache.cxf.osgi.itests:org.apache.cxf.osgi.itests-felix` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts.systests:cxf-services-sts-systests-advanced` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts.systests:cxf-services-sts-systests-basic` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts.systests:cxf-services-sts-systests-itests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts.systests:cxf-services-sts-systests-osgi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts:cxf-services-sts` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts:cxf-services-sts-core` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.sts:cxf-services-sts-systests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-api` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.wsn:cxf-services-wsn` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.wsn:cxf-services-wsn-api` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.wsn:cxf-services-wsn-core` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.wsn:cxf-services-wsn-osgi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-client` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-common` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-features` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-itests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-osgi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-service` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-war` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-x509-handlers` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.services:cxf-services` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests.wsdl_maven:cxf-systests-codegen` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests.wsdl_maven:cxf-systests-java2ws` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-microprofile-tck` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-base` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-owb` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-owb-multiple-apps` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-owb-no-apps` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-owb-producers` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-weld` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-weld-multiple-apps` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-weld-no-apps` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-cdi-weld-producers` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ci-grizzly` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ci-webapp` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-container-integration` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-databinding` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-fork` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-http-sci` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-jaxrs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-jaxws` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-kerberos` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ldap` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-microprofile-async` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-microprofile-jaxrs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-microprofile-nocdi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-microprofile-tracing` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-microprofile-weld` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-security` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-sse` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-sse-base` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-sse-jetty` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-sse-tomcat` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-rs-sse-undertow` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-spring-boot` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-tracing` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-transport-hc5` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-transport-jms` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-transport-netty` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-transport-undertow` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-transports` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-uncategorized` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ws-rm` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ws-security` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ws-security-examples` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-systests-ws-specs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf.systests:cxf-wsdl-maven` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:apache-cxf` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-archetypes` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-bom` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-bundle-compatible` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-bundle-parent` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-codegen-plugin` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-corbatools-maven-plugin` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-core` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-distribution-javadoc` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-distribution-manifest` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-cdi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-jca` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-spring-boot` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-tracing-brave` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-tracing-opentelemetry` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-integration-tracing-opentracing` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-java2swagger-plugin` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-java2wadl-plugin` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-java2ws-plugin` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-maven-plugins` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-osgi` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-parent` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-repository` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-bindings` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-bindings-coloc` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-bindings-corba` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-bindings-soap` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-bindings-xml` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-databinding` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-databinding-aegis` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-databinding-jaxb` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-features` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-features-clustering` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-features-logging` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-features-metrics` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-features-throttling` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-frontend` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-frontend-jaxrs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-frontend-jaxws` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-frontend-js` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-frontend-simple` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-javascript` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-javascript-tests` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-management` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-client` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-providers` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-reactivestreams` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-reactor` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-rx` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-rx2` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-rx3` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-extension-search` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-http-sci` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-json-basic` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-mp-client` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-cors` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-http-signature` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-jose` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-jose-jaxrs` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-jose-parent` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-rs-security-oauth-parent` TuxCare:Maven	3.5.9 up to 3.5.9-tuxcare.2, plus listed versions 3.5.9.tuxcare.1	3.5.9-tuxcare.2
`org.apache.cxf:cxf-rt-transports-jms` Maven	before 3.6.8, plus listed versions 2.0.102.0.112.0.122.0.132.0.6 Show 45 moreShow less 2.0.72.0.82.0.92.12.1.12.1.102.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.92.22.2.12.2.102.2.112.2.122.2.22.2.32.2.42.2.52.2.62.2.72.2.82.2.92.3.02.3.12.3.102.3.112.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.92.4.02.4.12.4.102.4.22.4.32.4.4	3.6.8
`org.apache.cxf:cxf-rt-transports-jms` Maven	4.0.0 up to 4.0.9, plus listed versions 4.0.14.0.24.0.34.0.44.0.54.0.64.0.74.0.8	4.0.9
`org.apache.cxf:cxf-rt-transports-jms` Maven	4.1.0 up to 4.1.3, plus listed versions 4.1.14.1.2	4.1.3
`eap8-apache-commons-lang` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.18.0-1.redhat_00002.1.el8eap	0:3.18.0-1.redhat_00002.1.el8eap
`eap8-apache-cxf` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el8eap	0:4.0.9-4.redhat_00002.1.el8eap
`eap8-apache-cxf-rt` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el8eap	0:4.0.9-4.redhat_00002.1.el8eap
`eap8-apache-cxf-services` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el8eap	0:4.0.9-4.redhat_00002.1.el8eap
`eap8-apache-cxf-tools` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el8eap	0:4.0.9-4.redhat_00002.1.el8eap
`eap8-eap-product-conf-parent` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:801.0.1-2.GA_redhat_00003.1.el8eap	0:801.0.1-2.GA_redhat_00003.1.el8eap
`eap8-eap-product-conf-wildfly-ee-feature-pack` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:801.0.1-2.GA_redhat_00003.1.el8eap	0:801.0.1-2.GA_redhat_00003.1.el8eap
`eap8-jbossws-cxf` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:7.3.4-1.Final_redhat_00001.1.el8eap	0:7.3.4-1.Final_redhat_00001.1.el8eap
`eap8-netty` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-buffer` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-dns` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-http` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-socks` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-common` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-handler` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-handler-proxy` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-resolver` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-resolver-dns` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-classes-epoll` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-epoll` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-epoll-debuginfo` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-unix-common` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-opensaml` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-core` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-profile-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-saml-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-security-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-security-impl` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-soap-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-saml-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xmlsec-api` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xmlsec-impl` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-wildfly` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el8eap	0:8.1.0-55.GA_redhat_00016.1.el8eap
`eap8-wildfly-java-jdk17` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el8eap	0:8.1.0-55.GA_redhat_00016.1.el8eap
`eap8-wildfly-java-jdk21` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el8eap	0:8.1.0-55.GA_redhat_00016.1.el8eap
`eap8-wildfly-modules` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el8eap	0:8.1.0-55.GA_redhat_00016.1.el8eap
`eap8-wss4j` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-bindings` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-policy` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-ws-security-common` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-ws-security-dom` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-ws-security-policy-stax` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-wss4j-ws-security-stax` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el8eap	0:3.0.4-1.redhat_00002.1.el8eap
`eap8-xml-security` Red Hat:jboss_enterprise_application_platform:8.1::el8 From an advisory covering 3 CVEs	before 0:3.0.5-1.redhat_00001.1.el8eap	0:3.0.5-1.redhat_00001.1.el8eap
`eap8-apache-commons-lang` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.18.0-1.redhat_00002.1.el9eap	0:3.18.0-1.redhat_00002.1.el9eap
`eap8-apache-cxf` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el9eap	0:4.0.9-4.redhat_00002.1.el9eap
`eap8-apache-cxf-rt` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el9eap	0:4.0.9-4.redhat_00002.1.el9eap
`eap8-apache-cxf-services` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el9eap	0:4.0.9-4.redhat_00002.1.el9eap
`eap8-apache-cxf-tools` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.0.9-4.redhat_00002.1.el9eap	0:4.0.9-4.redhat_00002.1.el9eap
`eap8-eap-product-conf-parent` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:801.0.1-2.GA_redhat_00003.1.el9eap	0:801.0.1-2.GA_redhat_00003.1.el9eap
`eap8-eap-product-conf-wildfly-ee-feature-pack` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:801.0.1-2.GA_redhat_00003.1.el9eap	0:801.0.1-2.GA_redhat_00003.1.el9eap
`eap8-jbossws-cxf` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:7.3.4-1.Final_redhat_00001.1.el9eap	0:7.3.4-1.Final_redhat_00001.1.el9eap
`eap8-netty` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-buffer` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-codec` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-codec-dns` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-codec-http` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-codec-socks` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-common` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-handler` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-handler-proxy` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-resolver` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-resolver-dns` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-transport` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-transport-classes-epoll` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-transport-native-epoll` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-transport-native-epoll-debuginfo` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-netty-transport-native-unix-common` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el9eap	0:4.1.127-1.Final_redhat_00001.1.el9eap
`eap8-opensaml` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-core` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-profile-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-saml-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-security-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-security-impl` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-soap-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xacml-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xacml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xacml-saml-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xacml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xmlsec-api` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-opensaml-xmlsec-impl` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el9eap	0:4.3.2-2.redhat_00002.1.el9eap
`eap8-wildfly` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el9eap	0:8.1.0-55.GA_redhat_00016.1.el9eap
`eap8-wildfly-java-jdk17` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el9eap	0:8.1.0-55.GA_redhat_00016.1.el9eap
`eap8-wildfly-java-jdk21` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el9eap	0:8.1.0-55.GA_redhat_00016.1.el9eap
`eap8-wildfly-modules` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:8.1.0-55.GA_redhat_00016.1.el9eap	0:8.1.0-55.GA_redhat_00016.1.el9eap
`eap8-wss4j` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-bindings` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-policy` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-ws-security-common` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-ws-security-dom` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-ws-security-policy-stax` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-wss4j-ws-security-stax` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.4-1.redhat_00002.1.el9eap	0:3.0.4-1.redhat_00002.1.el9eap
`eap8-xml-security` Red Hat:jboss_enterprise_application_platform:8.1::el9 From an advisory covering 3 CVEs	before 0:3.0.5-1.redhat_00001.1.el9eap	0:3.0.5-1.redhat_00001.1.el9eap
`eap8-apache-cxf` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.0.9-5.redhat_00002.1.el8eap	0:4.0.9-5.redhat_00002.1.el8eap
`eap8-apache-cxf-rt` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.0.9-5.redhat_00002.1.el8eap	0:4.0.9-5.redhat_00002.1.el8eap
`eap8-apache-cxf-services` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.0.9-5.redhat_00002.1.el8eap	0:4.0.9-5.redhat_00002.1.el8eap
`eap8-apache-cxf-tools` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.0.9-5.redhat_00002.1.el8eap	0:4.0.9-5.redhat_00002.1.el8eap
`eap8-apache-cxf-xjc-utils` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-cxf-xjc-boolean` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-cxf-xjc-bug986` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-cxf-xjc-dv` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-cxf-xjc-runtime` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-cxf-xjc-ts` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.0-1.redhat_00001.1.el8eap	0:4.1.0-1.redhat_00001.1.el8eap
`eap8-eap-product-conf-parent` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:800.9.1-3.GA_redhat_00004.1.el8eap	0:800.9.1-3.GA_redhat_00004.1.el8eap
`eap8-eap-product-conf-wildfly-ee-feature-pack` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:800.9.1-3.GA_redhat_00004.1.el8eap	0:800.9.1-3.GA_redhat_00004.1.el8eap
`eap8-jbossws-cxf` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:7.3.4-1.Final_redhat_00001.1.el8eap	0:7.3.4-1.Final_redhat_00001.1.el8eap
`eap8-netty` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-buffer` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-dns` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-http` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-codec-socks` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-common` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-handler` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-handler-proxy` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-resolver` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-resolver-dns` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-classes-epoll` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-epoll` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-epoll-debuginfo` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-netty-transport-native-unix-common` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.1.127-1.Final_redhat_00001.1.el8eap	0:4.1.127-1.Final_redhat_00001.1.el8eap
`eap8-opensaml` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-core` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-profile-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-saml-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-security-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-security-impl` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-soap-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-impl` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-saml-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xacml-saml-impl` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xmlsec-api` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-opensaml-xmlsec-impl` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:4.3.2-2.redhat_00002.1.el8eap	0:4.3.2-2.redhat_00002.1.el8eap
`eap8-wildfly` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:8.0.9-8.GA_redhat_00008.1.el8eap	0:8.0.9-8.GA_redhat_00008.1.el8eap
`eap8-wildfly-java-jdk11` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:8.0.9-8.GA_redhat_00008.1.el8eap	0:8.0.9-8.GA_redhat_00008.1.el8eap
`eap8-wildfly-java-jdk17` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:8.0.9-8.GA_redhat_00008.1.el8eap	0:8.0.9-8.GA_redhat_00008.1.el8eap
`eap8-wildfly-java-jdk21` Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs	before 0:8.0.9-8.GA_redhat_00008.1.el8eap	0:8.0.9-8.GA_redhat_00008.1.el8eap

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-48913 is a critical vulnerability (CVSS 9.8) in Apache Cxf, published August 8, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. Fixed in org.apache.cxf:cxf-rt-transports-jms 3.6.8.

References

Show 109 moreShow less

This page doesn't list everything

Left out here: 286 package rows and 152 versions. The JSON record has them. Also not on the record: 219 package claims. ID and package lookups still check them.