Every CVE Search/ Get API key

CVE-2026-0603

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

8.3 HighPublic exploitFix available

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
Low

Exploit likelihood

1.03%Up 1.0 points since Jan 23, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.3

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
CVE-2026-0603
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness
CWE-89, CWE-89
Updated
2026-11-04
EUVDEUVD-2026-4427 8.3

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
EUVD-2026-4427
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-04
GitHub AdvisoriesGHSA-2p5w-cvg5-gc5c 8.3

Hibernate vulnerable to SQL Injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
GHSA-2p5w-cvg5-gc5c
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness
CWE-89
Updated
2026-11-02
NVD 8.3

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
CVE-2026-0603
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness
CWE-89
Updated
2026-11-04
OSV 8.3

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
CVE-2026-0603
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness
CWE-89
Updated
2026-11-05
OSVGHSA-2p5w-cvg5-gc5c 8.3

Hibernate vulnerable to SQL Injection

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. This could lead to sensitive information disclosure, such as reading system files, and allow for data manipulation or deletion within the application's database, resulting in an application level denial of service.

Record
GHSA-2p5w-cvg5-gc5c
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Weakness
CWE-89
Updated
2026-11-02
Show 15 moreShow less
OSVRHSA-2026:4915 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4915
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:4916 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4916
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:4917 9.6

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.24 security update

Record
RHSA-2026:4917
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:6011 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.17 security update

Record
RHSA-2026:6011
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:6012 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.14 security update

Record
RHSA-2026:6012
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:76128 9.6

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7

Record
RHSA-2026:76128
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:76129 9.6

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 8

Record
RHSA-2026:76129
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2026:76130 9.6

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 9

Record
RHSA-2026:76130
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Updated
2026-11-02
OSVCLSA-2026-1769731733 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.6.15.Final-tuxcare.3.

Record
CLSA-2026-1769731733
Updated
2026-11-02
OSVCLSA-2026-1778892379 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.33.Final-tuxcare.1.

Record
CLSA-2026-1778892379
Updated
2026-11-02
OSVCLSA-2026-1779151631 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.5.9.Final-tuxcare.1.

Record
CLSA-2026-1779151631
Updated
2026-11-02
OSVCLSA-2026-1779238047 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.5.6.Final-tuxcare.1.

Record
CLSA-2026-1779238047
Updated
2026-11-02
OSVCLSA-2026-1783299710 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.31.Final-tuxcare.2.

Record
CLSA-2026-1783299710
Updated
2026-11-02
OSVCLSA-2026-1783386136 No score

TuxCare security update for org.hibernate:hibernate-core (1 CVE)

TuxCare rebuilt org.hibernate:hibernate-core to address 1 CVE. Fixed in 5.4.30.Final-tuxcare.2.

Record
CLSA-2026-1783386136
Updated
2026-11-02
OSVROOT-APP-MAVEN-CVE-2026-0603 No score

CVE-2026-0603 in org.hibernate:hibernate-core - Patched by Root

Root has patched CVE-2026-0603 in the org.hibernate:hibernate-core package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-CVE-2026-0603
Updated
2026-11-02

Affected products

Show 11 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
org.hibernate:hibernate-core
Maven
 5.2.8 up to 5.3.38
5.3.38
org.hibernate:hibernate-core
TuxCare:Maven
 5.6.15.Final up to 5.6.15.Final-tuxcare.3, plus listed versions
5.6.15.Final-tuxcare.15.6.15.Final-tuxcare.2
5.6.15.Final-tuxcare.3
org.hibernate:hibernate-core
TuxCare:Maven
 5.4.33.Final up to 5.4.33.Final-tuxcare.1
5.4.33.Final-tuxcare.1
org.hibernate:hibernate-core
TuxCare:Maven
 5.5.9.Final up to 5.5.9.Final-tuxcare.1
5.5.9.Final-tuxcare.1
org.hibernate:hibernate-core
TuxCare:Maven
 5.5.6.Final up to 5.5.6.Final-tuxcare.1
5.5.6.Final-tuxcare.1
org.hibernate:hibernate-core
TuxCare:Maven
 5.4.31.Final up to 5.4.31.Final-tuxcare.2, plus listed versions
5.4.31.Final-tuxcare.1
5.4.31.Final-tuxcare.2
org.hibernate:hibernate-core
TuxCare:Maven
 5.4.30.Final up to 5.4.30.Final-tuxcare.2, plus listed versions
5.4.30.Final-tuxcare.1
5.4.30.Final-tuxcare.2
org.hibernate:hibernate-core
Maven
 5.2.8 up to 5.3.38, plus listed versions
5.2.10.Final5.2.11.Final5.2.12.Final5.2.13.Final5.2.14.Final
Show 45 moreShow less
5.2.15.Final5.2.16.Final5.2.17.Final5.2.18.Final5.2.8.Final5.2.9.Final5.3.0.Beta15.3.0.Beta25.3.0.CR15.3.0.CR25.3.0.Final5.3.1.Final5.3.10.Final5.3.11.Final5.3.12.Final5.3.13.Final5.3.14.Final5.3.15.Final5.3.16.Final5.3.17.Final5.3.18.Final5.3.19.Final5.3.2.Final5.3.20.Final5.3.21.Final5.3.22.Final5.3.23.Final5.3.24.Final5.3.25.Final5.3.26.Final5.3.27.Final5.3.28.Final5.3.29.Final5.3.3.Final5.3.30.Final5.3.31.Final5.3.32.Final5.3.33.Final5.3.34.Final5.3.35.Final5.3.36.Final5.3.37.Final5.3.4.Final5.3.5.Final5.3.6.Final
5.3.38
eap7-undertow
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:2.2.39-1.Final_redhat_00001.1.el7eap
0:2.2.39-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el7eap
0:7.4.24-4.GA_redhat_00002.1.el7eap
Show 174 moreShow less
Affected packages
PackageAffectedFixed
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el7eap
0:7.4.24-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el7eap
0:7.4.24-4.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el7eap
0:7.4.24-4.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el7eap
0:7.4.24-4.GA_redhat_00002.1.el7eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el7eap
0:2.0.16-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el7eap
0:2.0.16-1.Final_redhat_00001.1.el7eap
eap7-eclipse-jgit
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.13.5.202508271544-2.r_redhat_00001.1.el7eap
0:5.13.5.202508271544-2.r_redhat_00001.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el7eap
0:3.5.11-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el7eap
0:3.5.11-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el7eap
0:3.5.11-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el7eap
0:3.5.11-1.SP1_redhat_00001.1.el7eap
eap7-netty
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el7eap
0:4.1.124-1.Final_redhat_00001.1.el7eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el7
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:2.2.39-1.Final_redhat_00001.1.el8eap
0:2.2.39-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el8eap
0:7.4.24-4.GA_redhat_00002.1.el8eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el8eap
0:2.0.16-1.Final_redhat_00001.1.el8eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el8eap
0:2.0.16-1.Final_redhat_00001.1.el8eap
eap7-eclipse-jgit
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap
0:5.13.5.202508271544-2.r_redhat_00001.1.el8eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el8eap
0:3.5.11-1.SP1_redhat_00001.1.el8eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el8eap
0:3.5.11-1.SP1_redhat_00001.1.el8eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el8eap
0:3.5.11-1.SP1_redhat_00001.1.el8eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el8eap
0:3.5.11-1.SP1_redhat_00001.1.el8eap
eap7-netty
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-all
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el8eap
0:4.1.124-1.Final_redhat_00001.1.el8eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el8eap
0:5.3.38-1.Final_redhat_00001.1.el8eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el8eap
0:5.3.38-1.Final_redhat_00001.1.el8eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el8eap
0:5.3.38-1.Final_redhat_00001.1.el8eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el8eap
0:5.3.38-1.Final_redhat_00001.1.el8eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform_els:7.4::el8
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el8eap
0:5.3.38-1.Final_redhat_00001.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:2.2.39-1.Final_redhat_00001.1.el9eap
0:2.2.39-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:7.4.24-4.GA_redhat_00002.1.el9eap
0:7.4.24-4.GA_redhat_00002.1.el9eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el9eap
0:2.0.16-1.Final_redhat_00001.1.el9eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:2.0.16-1.Final_redhat_00001.1.el9eap
0:2.0.16-1.Final_redhat_00001.1.el9eap
eap7-eclipse-jgit
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:5.13.5.202508271544-2.r_redhat_00001.1.el9eap
0:5.13.5.202508271544-2.r_redhat_00001.1.el9eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el9eap
0:3.5.11-1.SP1_redhat_00001.1.el9eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el9eap
0:3.5.11-1.SP1_redhat_00001.1.el9eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el9eap
0:3.5.11-1.SP1_redhat_00001.1.el9eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:3.5.11-1.SP1_redhat_00001.1.el9eap
0:3.5.11-1.SP1_redhat_00001.1.el9eap
eap7-netty
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-buffer
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-haproxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-http
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-http2
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-memcache
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-mqtt
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-redis
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-smtp
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-socks
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-stomp
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-codec-xml
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-handler
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-resolver
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-resolver-dns-classes-macos
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-classes-kqueue
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-netty-transport-sctp
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:4.1.124-1.Final_redhat_00001.1.el9eap
0:4.1.124-1.Final_redhat_00001.1.el9eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el9eap
0:5.3.38-1.Final_redhat_00001.1.el9eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el9eap
0:5.3.38-1.Final_redhat_00001.1.el9eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_els:7.4::el9
From an advisory covering 9 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el9eap
0:5.3.38-1.Final_redhat_00001.1.el9eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:2.0.41-7.SP8_redhat_00001.1.el7eap
0:2.0.41-7.SP8_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:7.3.17-5.GA_redhat_00006.1.el7eap
0:7.3.17-5.GA_redhat_00006.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:7.3.17-5.GA_redhat_00006.1.el7eap
0:7.3.17-5.GA_redhat_00006.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:7.3.17-5.GA_redhat_00006.1.el7eap
0:7.3.17-5.GA_redhat_00006.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:7.3.17-5.GA_redhat_00006.1.el7eap
0:7.3.17-5.GA_redhat_00006.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:7.3.17-5.GA_redhat_00006.1.el7eap
0:7.3.17-5.GA_redhat_00006.1.el7eap
eap7-eclipse-jgit
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.13.5.202508271544-1.r_redhat_00001.1.el7eap
0:5.13.5.202508271544-1.r_redhat_00001.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:3.4.10-3.SP2_redhat_00003.1.el7eap
0:3.4.10-3.SP2_redhat_00003.1.el7eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:3.4.10-3.SP2_redhat_00003.1.el7eap
0:3.4.10-3.SP2_redhat_00003.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:3.4.10-3.SP2_redhat_00003.1.el7eap
0:3.4.10-3.SP2_redhat_00003.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:3.4.10-3.SP2_redhat_00003.1.el7eap
0:3.4.10-3.SP2_redhat_00003.1.el7eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.0-2.SP1_redhat_00002.1.el7eap
0:5.3.0-2.SP1_redhat_00002.1.el7eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 4 CVEs
 before 0:5.3.38-1.Final_redhat_00001.1.el7eap
0:5.3.38-1.Final_redhat_00001.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:1.4.18-19.SP17_redhat_00001.1.ep7.el7
0:1.4.18-19.SP17_redhat_00001.1.ep7.el7
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:7.1.14-4.GA_redhat_00003.1.ep7.el7
0:7.1.14-4.GA_redhat_00003.1.ep7.el7
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:7.1.14-4.GA_redhat_00003.1.ep7.el7
0:7.1.14-4.GA_redhat_00003.1.ep7.el7
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.16-6.redhat_00006.1.ep7.el7
0:3.1.16-6.redhat_00006.1.ep7.el7
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.16-6.redhat_00006.1.ep7.el7
0:3.1.16-6.redhat_00006.1.ep7.el7
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.16-6.redhat_00006.1.ep7.el7
0:3.1.16-6.redhat_00006.1.ep7.el7
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:3.1.16-6.redhat_00006.1.ep7.el7
0:3.1.16-6.redhat_00006.1.ep7.el7
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.11-1.SP1_redhat_00001.1.ep7.el7
0:5.1.11-1.SP1_redhat_00001.1.ep7.el7
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
eap7-hibernate-infinispan
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 3 CVEs
 before 0:5.1.17-4.Final_redhat_00005.1.ep7.el7
0:5.1.17-4.Final_redhat_00005.1.ep7.el7
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el7sso
0:18.0.20-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el7sso
0:18.0.20-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el8sso
0:18.0.20-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el8sso
0:18.0.20-1.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el9sso
0:18.0.20-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 27 CVEs
 before 0:18.0.20-1.redhat_00001.1.el9sso
0:18.0.20-1.redhat_00001.1.el9sso
org.hibernate:hibernate-core
Root:Maven
 before 5.6.12.Final-aikido.1
5.6.12.Final-aikido.1
io.root.org.hibernate:hibernate-core
Root:Maven
 before 5.6.12.Final-root.io.1
5.6.12.Final-root.io.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubEQSTLab/CVE-2026-06032026-04-23
PoC in GitHubyym8538/CVE-2026-06032026-08-21

History

History
RecordedChangedSources
affectedEUVD, NVD, OSV
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-0603 is a high vulnerability (CVSS 8.3) in Red Hat Amq Broker 7, published January 23, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. Fixed in org.hibernate:hibernate-core 5.3.38.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 3 versions and 14 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open