CVE-2017-3163
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
7.5
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
CVE-2017-3163- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
CVE-2017-3163- Updated
- 2026-11-02
EUVDEUVD-2018-0485 No score
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
EUVD-2018-0485- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-387v-84cv-9qmc
7.5
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
GHSA-387v-84cv-9qmc- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSV
7.5
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
CVE-2017-3163- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-3163
7.5
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
DEBIAN-CVE-2017-3163- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 6 moreShow less
OSVGHSA-387v-84cv-9qmc
7.5
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
GHSA-387v-84cv-9qmc- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVRHSA-2018:1448
8.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update
- Record
RHSA-2018:1448- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1449
8.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update
- Record
RHSA-2018:1449- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1450
8.1
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update
- Record
RHSA-2018:1450- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1451
8.1
Red Hat Security Advisory: eap6-jboss-ec2-eap security update
- Record
RHSA-2018:1451- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-3163
7.5
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
- Record
UBUNTU-CVE-2017-3163- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.solr:solr-coreMaven |
before 5.5.4 | 5.5.4 |
org.apache.solr:solr-coreMaven |
6.0.0 up to 6.4.1 | 6.4.1 |
lucene-solrDebian:12 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:13 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:14 |
before 3.6.2+dfsg-11 | 3.6.2+dfsg-11 |
lucene-solrDebian:7 |
before 3.6.0+dfsg-1+deb7u2, plus listed versions 3.6.0+dfsg-13.6.0+dfsg-1+deb7u1 |
3.6.0+dfsg-1+deb7u2 |
lucene-solrDebian:8 From an advisory covering 2 CVEs |
before 3.6.2+dfsg-5+deb8u1, plus listed versions 3.6.2+dfsg-5 |
3.6.2+dfsg-5+deb8u1 |
lucene-solrDebian:9 From an advisory covering 2 CVEs |
before 3.6.2+dfsg-10+deb9u1, plus listed versions 3.6.2+dfsg-10 |
3.6.2+dfsg-10+deb9u1 |
org.apache.solr:solr-coreMaven |
before 5.5.4, plus listed versions 1.3.01.4.01.4.13.1.03.2.0 Show 44 moreShow less3.3.03.4.03.5.03.6.03.6.13.6.24.0.04.0.0-ALPHA4.0.0-BETA4.1.04.10.04.10.14.10.24.10.34.10.44.2.04.2.14.3.04.3.14.4.04.5.04.5.14.6.04.6.14.7.04.7.14.7.24.8.04.8.14.9.04.9.15.0.05.1.05.2.05.2.15.3.05.3.15.3.25.4.05.4.15.5.05.5.15.5.25.5.3 |
5.5.4 |
org.apache.solr:solr-coreMaven |
6.0.0 up to 6.4.1, plus listed versions 6.0.16.1.06.2.06.2.16.3.06.4.0 |
6.4.1 |
Show 226 moreShow less
| Package | Affected | Fixed |
|---|---|---|
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el7 | 0:1.9.9-12.redhat_6.1.ep6.el7 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el7 | 0:1.9.9-12.redhat_6.1.ep6.el7 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el7 | 0:1.9.9-12.redhat_6.1.ep6.el7 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el7 | 0:1.9.9-12.redhat_6.1.ep6.el7 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el7 | 0:1.9.9-12.redhat_6.1.ep6.el7 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:2.3.25-26.SP24_redhat_1.1.ep6.el7 | 0:2.3.25-26.SP24_redhat_1.1.ep6.el7 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el7 | 0:7.5.20-1.Final_redhat_1.1.ep6.el7 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 1:4.17.43-1.Final_redhat_1.1.ep6.el7 | 1:4.17.43-1.Final_redhat_1.1.ep6.el7 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:7.5.28-1.Final_redhat_1.1.ep6.el7 | 0:7.5.28-1.Final_redhat_1.1.ep6.el7 |
jgroupsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 1:3.2.18-1.Final_redhat_1.1.ep6.el7 | 1:3.2.18-1.Final_redhat_1.1.ep6.el7 |
lucene-solrRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:3.6.2-8.redhat_9.1.ep6.el7 | 0:3.6.2-8.redhat_9.1.ep6.el7 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 7 CVEs |
before 0:4.1.7-1.Final_redhat_1.1.ep6.el7 | 0:4.1.7-1.Final_redhat_1.1.ep6.el7 |
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el6 | 0:1.9.9-12.redhat_6.1.ep6.el6 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el6 | 0:1.9.9-12.redhat_6.1.ep6.el6 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el6 | 0:1.9.9-12.redhat_6.1.ep6.el6 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el6 | 0:1.9.9-12.redhat_6.1.ep6.el6 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el6 | 0:1.9.9-12.redhat_6.1.ep6.el6 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:2.3.25-26.SP24_redhat_1.1.ep6.el6 | 0:2.3.25-26.SP24_redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.1.ep6.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 1:4.17.43-1.Final_redhat_1.1.ep6.el6 | 1:4.17.43-1.Final_redhat_1.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:7.5.28-1.Final_redhat_1.1.ep6.el6 | 0:7.5.28-1.Final_redhat_1.1.ep6.el6 |
jgroupsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 1:3.2.18-1.Final_redhat_1.1.ep6.el6 | 1:3.2.18-1.Final_redhat_1.1.ep6.el6 |
lucene-solrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:3.6.2-8.redhat_9.1.ep6.el6 | 0:3.6.2-8.redhat_9.1.ep6.el6 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 8 CVEs |
before 0:4.1.7-1.Final_redhat_1.1.ep6.el6 | 0:4.1.7-1.Final_redhat_1.1.ep6.el6 |
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el5 | 0:1.9.9-12.redhat_6.1.ep6.el5 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el5 | 0:1.9.9-12.redhat_6.1.ep6.el5 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el5 | 0:1.9.9-12.redhat_6.1.ep6.el5 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el5 | 0:1.9.9-12.redhat_6.1.ep6.el5 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:1.9.9-12.redhat_6.1.ep6.el5 | 0:1.9.9-12.redhat_6.1.ep6.el5 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:2.3.25-26.SP24_redhat_1.1.ep6.el5 | 0:2.3.25-26.SP24_redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.20-1.Final_redhat_1.1.ep6.el5 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 1:4.17.43-1.Final_redhat_1.1.ep6.el5 | 1:4.17.43-1.Final_redhat_1.1.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:7.5.28-1.Final_redhat_1.1.ep6.el5 | 0:7.5.28-1.Final_redhat_1.1.ep6.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 1:3.2.18-1.Final_redhat_1.1.ep6.el5 | 1:3.2.18-1.Final_redhat_1.1.ep6.el5 |
lucene-solrRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:3.6.2-8.redhat_9.1.ep6.el5 | 0:3.6.2-8.redhat_9.1.ep6.el5 |
picketboxRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 8 CVEs |
before 0:4.1.7-1.Final_redhat_1.1.ep6.el5 | 0:4.1.7-1.Final_redhat_1.1.ep6.el5 |
jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.ep6.el6 |
jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 7 CVEs |
before 0:7.5.20-1.Final_redhat_1.ep6.el6 | 0:7.5.20-1.Final_redhat_1.ep6.el6 |
lucene-solrUbuntu:Pro:14.04:LTS |
before 3.6.2+dfsg-2ubuntu0.1~esm2, plus listed versions 3.6.2+dfsg-13.6.2+dfsg-23.6.2+dfsg-2ubuntu0.1~esm1 |
3.6.2+dfsg-2ubuntu0.1~esm2 |
lucene-solrUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 3.6.2+dfsg-73.6.2+dfsg-83.6.2+dfsg-8ubuntu0.13.6.2+dfsg-8ubuntu0.1+esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-3163 is a high vulnerability (CVSS 7.5) in Apache Solr, published July 30, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.56%, the 93rd percentile. Fixed in org.apache.solr:solr-core 5.5.4.
References
access.redhat.com/errata/RHSA-2018:1448
access.redhat.com/errata/RHSA-2018:1449
access.redhat.com/errata/RHSA-2018:1450
access.redhat.com/errata/RHSA-2018:1451
lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E
access.redhat.com/errata/RHSA-2018:1447
Show 56 moreShow less
debian.org/security/2018/dsa-4124
nvd.nist.gov/vuln/detail/CVE-2017-3163
github.com/advisories/GHSA-387v-84cv-9qmc
lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488@%3Csolr-user.lucene.apache.org%3E
security-tracker.debian.org/tracker/CVE-2017-3163
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform?version=6.4
bugzilla.redhat.com/show_bug.cgi?id=1379207
bugzilla.redhat.com/show_bug.cgi?id=1454783
bugzilla.redhat.com/show_bug.cgi?id=1506612
bugzilla.redhat.com/show_bug.cgi?id=1528565
bugzilla.redhat.com/show_bug.cgi?id=1548289
bugzilla.redhat.com/show_bug.cgi?id=1548909
bugzilla.redhat.com/show_bug.cgi?id=1549276
bugzilla.redhat.com/show_bug.cgi?id=1559010
bugzilla.redhat.com/show_bug.cgi?id=1559013
bugzilla.redhat.com/show_bug.cgi?id=1559018
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1448.json
access.redhat.com/security/cve/CVE-2016-4978
cve.org/CVERecord?id=CVE-2016-4978
nvd.nist.gov/vuln/detail/CVE-2016-4978
access.redhat.com/security/cve/CVE-2017-3163
cve.org/CVERecord?id=CVE-2017-3163
access.redhat.com/security/cve/CVE-2017-15095
cve.org/CVERecord?id=CVE-2017-15095
nvd.nist.gov/vuln/detail/CVE-2017-15095
access.redhat.com/solutions/3442891
access.redhat.com/security/cve/CVE-2017-17485
cve.org/CVERecord?id=CVE-2017-17485
nvd.nist.gov/vuln/detail/CVE-2017-17485
access.redhat.com/security/cve/CVE-2018-1304
cve.org/CVERecord?id=CVE-2018-1304
nvd.nist.gov/vuln/detail/CVE-2018-1304
tomcat.apache.org/security-7.html
tomcat.apache.org/security-8.html
access.redhat.com/security/cve/CVE-2018-7489
cve.org/CVERecord?id=CVE-2018-7489
nvd.nist.gov/vuln/detail/CVE-2018-7489
access.redhat.com/security/cve/CVE-2018-8088
cve.org/CVERecord?id=CVE-2018-8088
nvd.nist.gov/vuln/detail/CVE-2018-8088
bugzilla.redhat.com/show_bug.cgi?id=1559008
bugzilla.redhat.com/show_bug.cgi?id=1559011
bugzilla.redhat.com/show_bug.cgi?id=1559016
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1449.json
access.redhat.com/security/cve/CVE-2017-7525
bugzilla.redhat.com/show_bug.cgi?id=1462702
cve.org/CVERecord?id=CVE-2017-7525
nvd.nist.gov/vuln/detail/CVE-2017-7525
bugzilla.redhat.com/show_bug.cgi?id=1559009
bugzilla.redhat.com/show_bug.cgi?id=1559012
bugzilla.redhat.com/show_bug.cgi?id=1559017
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1450.json
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1451.json
ubuntu.com/security/CVE-2017-3163
issues.apache.org/jira/browse/SOLR-10031