CVE-2010-4172
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
Exploit likelihood
What each source reports
NVD Score used
4.3
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
CVE-2010-4172- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
CVE-2010-4172- Updated
- 2026-11-02
EUVDEUVD-2022-3524 No score
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
EUVD-2022-3524- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c78g-qwpw-2jgv No score
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
GHSA-c78g-qwpw-2jgv- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVGHSA-c78g-qwpw-2jgv No score
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
- Record
GHSA-c78g-qwpw-2jgv- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
7.0.0 up to 7.0.5 | 7.0.5 |
org.apache.tomcat:tomcatMaven |
6.0.12 to 6.0.29 | None known |
tomcat6Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat6-webappsRed Hat:enterprise_linux:6::client From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::server From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-admin-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-docs-webappRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-webappsRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-el-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-jsp-2.1-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-libRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
tomcat6-servlet-2.5-apiRed Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs |
before 0:6.0.24-33.el6 | 0:6.0.24-33.el6 |
antRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el4 | 0:1.7.1-13.jdk6.ep5.el4 |
antlrRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.7.7-7.ep5.el4 | 0:2.7.7-7.ep5.el4 |
bcelRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.2-8.1.ep5.el4 | 0:5.2-8.1.ep5.el4 |
cglibRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2-5.1.1.jdk6.ep5.el4 | 0:2.2-5.1.1.jdk6.ep5.el4 |
dom4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.6.1-11.ep5.el4 | 0:1.6.1-11.ep5.el4 |
ecjRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:3.3.1.1-3.2.2.jdk6.ep5.el4 | 1:3.3.1.1-3.2.2.jdk6.ep5.el4 |
glassfish-jafRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.0-6.1.1.jdk6.ep5.el4 | 0:1.1.0-6.1.1.jdk6.ep5.el4 |
glassfish-javamailRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.4.2-0.4.ep5.el4 | 0:1.4.2-0.4.ep5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2_13-2.2.1.jdk6.ep5.el4 | 0:1.2_13-2.2.1.jdk6.ep5.el4 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:3.3.2-1.5.GA_CP04.ep5.el4 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.4.0-3.3.GA_CP04.ep5.el4 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.4.0-3.3.GA_CP04.ep5.el4 | 0:3.4.0-3.3.GA_CP04.ep5.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el4 | 0:3.1.0-1.8.ep5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el4 | 0:3.1.0-1.8.ep5.el4 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.0.2-3.jdk6.ep5.el4 | 1:1.0.2-3.jdk6.ep5.el4 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.0.2-3.jdk6.ep5.el4 | 1:1.0.2-3.jdk6.ep5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.4.0-4.3.GA_CP04.ep5.el4 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.4.0-4.3.GA_CP04.ep5.el4 | 0:3.4.0-4.3.GA_CP04.ep5.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:3.3.2-1.5.GA_CP04.ep5.el4 | 1:3.3.2-1.5.GA_CP04.ep5.el4 |
httpd22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-aprRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-utilRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-apr-util-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-develRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
httpd22-manualRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-14.ep5.el4 | 0:2.2.17-14.ep5.el4 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.8.0-4.1.1.jdk6.ep5.el4 | 0:1.8.0-4.1.1.jdk6.ep5.el4 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2-2.2.ep5.el4 | 0:1.2-2.2.ep5.el4 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.3-9.1.1.jdk6.ep5.el4 | 0:1.3-9.1.1.jdk6.ep5.el4 |
jakarta-commons-collectionsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.2.1-4.ep5.el4 | 0:3.2.1-4.ep5.el4 |
jakarta-commons-collections-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.2.1-4.ep5.el4 | 0:3.2.1-4.ep5.el4 |
jakarta-commons-daemonRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.0.5-1.ep5.el4 | 1:1.0.5-1.ep5.el4 |
jakarta-commons-daemon-jsvcRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.0.5-1.4.ep5.el4 | 1:1.0.5-1.4.ep5.el4 |
jakarta-commons-daemon-jsvc-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.0.5-1.4.ep5.el4 | 1:1.0.5-1.4.ep5.el4 |
jakarta-commons-dbcpRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.1-16.4.ep5.el4 | 0:1.2.1-16.4.ep5.el4 |
jakarta-commons-dbcp-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.1-16.4.ep5.el4 | 0:1.2.1-16.4.ep5.el4 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.8.1-8.1.jdk6.ep5.el4 | 0:1.8.1-8.1.jdk6.ep5.el4 |
jakarta-commons-elRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0-19.2.jdk6.ep5.el4 | 0:1.0-19.2.jdk6.ep5.el4 |
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.1.1-7.4.ep5.el4 | 1:1.1.1-7.4.ep5.el4 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:3.1-1.1.1.jdk6.ep5.el4 | 1:3.1-1.1.1.jdk6.ep5.el4 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.4-1.3.1.jdk6.ep5.el4 | 0:1.4-1.3.1.jdk6.ep5.el4 |
jakarta-commons-launcherRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1-4.6.1.ep5.el4 | 0:1.1-4.6.1.ep5.el4 |
jakarta-commons-loggingRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.1-0.4.1.jdk6.ep5.el4 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1-10.2.1.jdk6.ep5.el4 | 0:1.1-10.2.1.jdk6.ep5.el4 |
jakarta-commons-logging-tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.1-0.4.1.jdk6.ep5.el4 | 0:1.1.1-0.4.1.jdk6.ep5.el4 |
jakarta-commons-modelerRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.0-4.ep5.el4 | 0:2.0-4.ep5.el4 |
jakarta-commons-poolRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.3-11.2.1.jdk6.ep5.el4 | 0:1.3-11.2.1.jdk6.ep5.el4 |
jakarta-commons-pool-tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.3-11.2.1.jdk6.ep5.el4 | 0:1.3-11.2.1.jdk6.ep5.el4 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.3.1-7.5.1.ep5.el4 | 0:1.3.1-7.5.1.ep5.el4 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.0.8-3.3.2.1.jdk6.ep5.el4 | 0:2.0.8-3.3.2.1.jdk6.ep5.el4 |
jakarta-taglibs-standardRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.1-9.ep5.el4 | 0:1.1.1-9.ep5.el4 |
javassistRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.12.0-1.jdk6.ep5.el4 | 0:3.12.0-1.jdk6.ep5.el4 |
jboss-common-coreRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.2.17-1.ep5.el4 | 0:2.2.17-1.ep5.el4 |
jboss-common-logging-jdkRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.1.2-1.ep5.el4 | 0:2.1.2-1.ep5.el4 |
jboss-common-logging-spiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.1.2-1.ep5.el4 | 0:2.1.2-1.ep5.el4 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el4 | 0:5.0.1-2.9.ep5.el4 |
jcommonRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.16-1.2.1.jdk6.ep5.el4 | 0:1.0.16-1.2.1.jdk6.ep5.el4 |
jfreechartRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.13-2.3.2.1.jdk6.ep5.el4 | 0:1.0.13-2.3.2.1.jdk6.ep5.el4 |
log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.14-18.1.jdk6.ep5.el4 | 0:1.2.14-18.1.jdk6.ep5.el4 |
mod_clusterRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-jbossasRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.0.10-2.GA_CP01.ep5.el4 | 0:1.0.10-2.GA_CP01.ep5.el4 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.31-1.ep5.el4 | 0:1.2.31-1.ep5.el4 |
mod_ssl22Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:2.2.17-14.ep5.el4 | 1:2.2.17-14.ep5.el4 |
mx4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:3.0.1-9.3.4.ep5.el4 | 1:3.0.1-9.3.4.ep5.el4 |
objectweb-asmRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:3.1-5.3.1.jdk6.ep5.el4 | 0:3.1-5.3.1.jdk6.ep5.el4 |
regexpRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.5-1.2.1.jdk6.ep5.el4 | 0:1.5-1.2.1.jdk6.ep5.el4 |
struts12Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.9-3.ep5.el4 | 0:1.2.9-3.ep5.el4 |
tomcat-jkstatus-antRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.2.31-2.ep5.el4 | 0:1.2.31-2.ep5.el4 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.20-2.0.ep5.el4 | 0:1.1.20-2.0.ep5.el4 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:1.1.20-2.0.ep5.el4 | 0:1.1.20-2.0.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:5.5.33-14_patch_04.ep5.el4 | 0:5.5.33-14_patch_04.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:6.0.32-15_patch_03.ep5.el4 | 0:6.0.32-15_patch_03.ep5.el4 |
xalan-j2Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.7.1-5.3_patch_04.ep5.el4 | 0:2.7.1-5.3_patch_04.ep5.el4 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 0:2.9.1-3.patch01.1.ep5.el4 | 0:2.9.1-3.patch01.1.ep5.el4 |
xml-commonsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-jaxp-1.2-apisRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-jaxp-1.3-apisRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 8 CVEs |
before 1:1.3.04-7.12.ep5.el4 | 1:1.3.04-7.12.ep5.el4 |
antRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-antlrRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-bcelRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-bsfRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-oroRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-regexpRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-apache-resolverRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-commons-loggingRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-javamailRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jdependRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jmfRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-jschRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-junitRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-nodepsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-scriptsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-swingRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
ant-traxRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.7.1-13.jdk6.ep5.el5 | 0:1.7.1-13.jdk6.ep5.el5 |
antlrRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.7.7-7.ep5.el5 | 0:2.7.7-7.ep5.el5 |
cglibRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.2-5.1.1.1.jdk6.ep5.el5 | 0:2.2-5.1.1.1.jdk6.ep5.el5 |
dom4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.6.1-11.ep5.el5 | 0:1.6.1-11.ep5.el5 |
ecj3Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5 | 1:3.3.1.1-3.1.1.1.jdk6.ep5.el5 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2_13-3.1.1.jdk6.ep5.el5 | 0:1.2_13-3.1.1.jdk6.ep5.el5 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:3.3.2-1.4.GA_CP04.ep5.el5 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.4.0-3.2.GA_CP04.ep5.el5 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.4.0-3.2.GA_CP04.ep5.el5 | 0:3.4.0-3.2.GA_CP04.ep5.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el5 | 0:3.1.0-1.8.ep5.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el5 | 0:3.1.0-1.8.ep5.el5 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:1.0.2-3.1.jdk6.ep5.el5 | 1:1.0.2-3.1.jdk6.ep5.el5 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:1.0.2-3.1.jdk6.ep5.el5 | 1:1.0.2-3.1.jdk6.ep5.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.4.0-4.3.GA_CP04.ep5.el5 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.4.0-4.3.GA_CP04.ep5.el5 | 0:3.4.0-4.3.GA_CP04.ep5.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:3.3.2-1.4.GA_CP04.ep5.el5 | 1:3.3.2-1.4.GA_CP04.ep5.el5 |
httpdRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.2.17-11.1.ep5.el5 | 0:2.2.17-11.1.ep5.el5 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.8.0-4.1.2.1.jdk6.ep5.el5 | 0:1.8.0-4.1.2.1.jdk6.ep5.el5 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2-2.2.1.ep5.el5 | 0:1.2-2.2.1.ep5.el5 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3-9.2.1.1.jdk6.ep5.el5 | 0:1.3-9.2.1.1.jdk6.ep5.el5 |
jakarta-commons-collectionsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.2.1-4.1.ep5.el5 | 0:3.2.1-4.1.ep5.el5 |
jakarta-commons-collections-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.2.1-4.1.ep5.el5 | 0:3.2.1-4.1.ep5.el5 |
jakarta-commons-daemonRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:1.0.5-1.ep5.el5 | 1:1.0.5-1.ep5.el5 |
jakarta-commons-daemon-jsvcRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:1.0.5-1.4.ep5.el5 | 1:1.0.5-1.4.ep5.el5 |
jakarta-commons-dbcpRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.1-16.4.ep5.el5 | 0:1.2.1-16.4.ep5.el5 |
jakarta-commons-dbcp-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.1-16.4.ep5.el5 | 0:1.2.1-16.4.ep5.el5 |
jakarta-commons-digesterRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.8.1-8.1.jdk6.ep5.el5 | 0:1.8.1-8.1.jdk6.ep5.el5 |
jakarta-commons-fileuploadRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:1.1.1-7.4.ep5.el5 | 1:1.1.1-7.4.ep5.el5 |
jakarta-commons-httpclientRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:3.1-1.2.1.jdk6.ep5.el5 | 1:3.1-1.2.1.jdk6.ep5.el5 |
jakarta-commons-ioRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.4-1.3.1.jdk6.ep5.el5 | 0:1.4-1.3.1.jdk6.ep5.el5 |
jakarta-commons-loggingRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.1.1-0.4.1.jdk6.ep5.el5 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.1-10.2.1.jdk6.ep5.el5 | 0:1.1-10.2.1.jdk6.ep5.el5 |
jakarta-commons-logging-tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.1.1-0.4.1.jdk6.ep5.el5 | 0:1.1.1-0.4.1.jdk6.ep5.el5 |
jakarta-commons-poolRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3-11.2.1.jdk6.ep5.el5 | 0:1.3-11.2.1.jdk6.ep5.el5 |
jakarta-commons-pool-tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3-11.2.1.jdk6.ep5.el5 | 0:1.3-11.2.1.jdk6.ep5.el5 |
jakarta-commons-validatorRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3.1-7.5.2.ep5.el5 | 0:1.3.1-7.5.2.ep5.el5 |
jakarta-oroRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5 | 0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5 |
jakarta-taglibs-standardRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.1.1-9.1.ep5.el5 | 0:1.1.1-9.1.ep5.el5 |
javassistRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.12.0-1.jdk6.ep5.el5 | 0:3.12.0-1.jdk6.ep5.el5 |
jboss-common-coreRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.2.17-1.ep5.el5 | 0:2.2.17-1.ep5.el5 |
jboss-common-logging-jdkRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.1.2-1.ep5.el5 | 0:2.1.2-1.ep5.el5 |
jboss-common-logging-spiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.1.2-1.ep5.el5 | 0:2.1.2-1.ep5.el5 |
jboss-javaeeRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-javaee-pomsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.0.1-2.9.ep5.el5 | 0:5.0.1-2.9.ep5.el5 |
jcommonRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.16-1.2.1.jdk6.ep5.el5 | 0:1.0.16-1.2.1.jdk6.ep5.el5 |
jfreechartRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.13-2.3.2.1.jdk6.ep5.el5 | 0:1.0.13-2.3.2.1.jdk6.ep5.el5 |
mod_clusterRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-demoRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-jbossasRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-nativeRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.0.10-2.1.GA_CP01.ep5.el5 | 0:1.0.10-2.1.GA_CP01.ep5.el5 |
mod_jkRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_jk-ap20Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_jk-manualRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.31-1.1.ep5.el5 | 0:1.2.31-1.1.ep5.el5 |
mod_sslRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 1:2.2.17-11.1.ep5.el5 | 1:2.2.17-11.1.ep5.el5 |
objectweb-asmRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:3.1-5.3.1.jdk6.ep5.el5 | 0:3.1-5.3.1.jdk6.ep5.el5 |
struts12Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.9-3.1.ep5.el5 | 0:1.2.9-3.1.ep5.el5 |
tomcat-jkstatus-antRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.2.31-2.ep5.el5 | 0:1.2.31-2.ep5.el5 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.1.20-2.1.ep5.el5 | 0:1.1.20-2.1.ep5.el5 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasper-eclipseRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-parentRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:5.5.33-16_patch_04.ep5.el5 | 0:5.5.33-16_patch_04.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:6.0.32-15.1_patch_03.ep5.el5 | 0:6.0.32-15.1_patch_03.ep5.el5 |
xalan-j2Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.7.1-5.3_patch_04.ep5.el5 | 0:2.7.1-5.3_patch_04.ep5.el5 |
xerces-j2Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:2.9.1-3.patch01.1.ep5.el5 | 0:2.9.1-3.patch01.1.ep5.el5 |
xml-commonsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-jaxp-1.2-apisRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-jaxp-1.3-apisRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
xml-commons-resolver12Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 8 CVEs |
before 0:1.3.04-7.10.jdk6.ep5.el5 | 0:1.3.04-7.10.jdk6.ep5.el5 |
antRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-antlrRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-bcelRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-bsfRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-log4jRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-oroRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-regexpRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-apache-resolverRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-commons-loggingRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-commons-netRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-javamailRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jdependRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jmfRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-jschRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-junitRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-nodepsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-scriptsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-swingRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
ant-traxRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.7.1-14.ep5.el6 | 0:1.7.1-14.ep5.el6 |
antlrRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.7.7-7.ep5.el6 | 0:2.7.7-7.ep5.el6 |
cglibRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.2-5.4.ep5.el6 | 0:2.2-5.4.ep5.el6 |
dom4jRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.6.1-11.1.ep5.el6 | 0:1.6.1-11.1.ep5.el6 |
ecj3Red Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 1:3.3.1.1-4.ep5.el6 | 1:3.3.1.1-4.ep5.el6 |
glassfish-jsfRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.2_13-3.1.4.ep5.el6 | 0:1.2_13-3.1.4.ep5.el6 |
hibernate3Red Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 1:3.3.2-1.8.GA_CP04.ep5.el6 | 1:3.3.2-1.8.GA_CP04.ep5.el6 |
hibernate3-annotationsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.4.0-3.5.GA_CP04.ep5.el6 | 0:3.4.0-3.5.GA_CP04.ep5.el6 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.4.0-3.5.GA_CP04.ep5.el6 | 0:3.4.0-3.5.GA_CP04.ep5.el6 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el6 | 0:3.1.0-1.8.ep5.el6 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.1.0-1.8.ep5.el6 | 0:3.1.0-1.8.ep5.el6 |
hibernate3-ejb-persistence-3.0-apiRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 1:1.0.2-3.3.ep5.el6 | 1:1.0.2-3.3.ep5.el6 |
hibernate3-ejb-persistence-3.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 1:1.0.2-3.3.ep5.el6 | 1:1.0.2-3.3.ep5.el6 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.4.0-4.4.GA_CP04.ep5.el6 | 0:3.4.0-4.4.GA_CP04.ep5.el6 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:3.4.0-4.4.GA_CP04.ep5.el6 | 0:3.4.0-4.4.GA_CP04.ep5.el6 |
hibernate3-javadocRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 1:3.3.2-1.8.GA_CP04.ep5.el6 | 1:3.3.2-1.8.GA_CP04.ep5.el6 |
httpdRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-develRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-manualRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
httpd-toolsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:2.2.17-11.2.ep5.el6 | 0:2.2.17-11.2.ep5.el6 |
jakarta-commons-beanutilsRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.8.0-9.ep5.el6 | 0:1.8.0-9.ep5.el6 |
jakarta-commons-chainRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.2-2.2.2.ep5.el6 | 0:1.2-2.2.2.ep5.el6 |
jakarta-commons-codecRed Hat:jboss_enterprise_web_server:1::el6 From an advisory covering 8 CVEs |
before 0:1.3-12.1.ep5.el6 | 0:1.3-12.1.ep5.el6 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting | 2010-11-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4172 is a medium vulnerability (CVSS 4.3) in Apache Tomcat, published November 26, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 42.0%, the 98th percentile. Fixed in org.apache.tomcat:tomcat 7.0.5.
References
ubuntu.com/usn/USN-1048-1
secunia.com/advisories/42337
svn.apache.org/viewvc?view=revision&revision=1037778
securityfocus.com/archive/1/514866/100/0/threaded
secunia.com/advisories/45022
exchange.xforce.ibmcloud.com/vulnerabilities/63422
Show 67 moreShow less
tomcat.apache.org/security-7.html
bugzilla.redhat.com/show_bug.cgi?id=656246
vupen.com/english/advisories/2010/3047
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html
redhat.com/support/errata/RHSA-2011-0897.html
tomcat.apache.org/security-6.html
secunia.com/advisories/57126
redhat.com/support/errata/RHSA-2011-0791.html
vupen.com/english/advisories/2011/0203
securitytracker.com/id?1024764
redhat.com/support/errata/RHSA-2011-0896.html
support.apple.com/kb/HT5002
marc.info?l=bugtraq&m=139344343412337&w=2
support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html
secunia.com/advisories/43019
svn.apache.org/viewvc?view=revision&revision=1037779
securityfocus.com/bid/45015
nvd.nist.gov/vuln/detail/CVE-2010-4172
github.com/apache/tomcat/commit/5971f9392edc6d70808b2599b062b050fcd11d23
github.com/advisories/GHSA-c78g-qwpw-2jgv
github.com/apache/tomcat
access.redhat.com/errata/RHSA-2011:0791
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=636997
bugzilla.redhat.com/show_bug.cgi?id=643809
bugzilla.redhat.com/show_bug.cgi?id=661244
bugzilla.redhat.com/show_bug.cgi?id=675786
bugzilla.redhat.com/show_bug.cgi?id=675792
bugzilla.redhat.com/show_bug.cgi?id=678671
bugzilla.redhat.com/show_bug.cgi?id=695284
bugzilla.redhat.com/show_bug.cgi?id=697504
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0791.json
access.redhat.com/security/cve/CVE-2010-3718
cve.org/CVERecord?id=CVE-2010-3718
nvd.nist.gov/vuln/detail/CVE-2010-3718
access.redhat.com/security/cve/CVE-2010-4172
cve.org/CVERecord?id=CVE-2010-4172
access.redhat.com/security/cve/CVE-2011-0013
cve.org/CVERecord?id=CVE-2011-0013
nvd.nist.gov/vuln/detail/CVE-2011-0013
access.redhat.com/errata/RHSA-2011:0897
docs.redhat.com/docs/en-US/JBoss_Enterprise_Web_Server/1.0/html-single/Release_Notes_1.0.2/index.html
bugzilla.redhat.com/show_bug.cgi?id=585331
bugzilla.redhat.com/show_bug.cgi?id=618189
bugzilla.redhat.com/show_bug.cgi?id=640281
bugzilla.redhat.com/show_bug.cgi?id=677655
bugzilla.redhat.com/show_bug.cgi?id=677657
bugzilla.redhat.com/show_bug.cgi?id=677659
bugzilla.redhat.com/show_bug.cgi?id=703390
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0897.json
access.redhat.com/security/cve/CVE-2010-1157
cve.org/CVERecord?id=CVE-2010-1157
nvd.nist.gov/vuln/detail/CVE-2010-1157
access.redhat.com/security/cve/CVE-2010-1452
cve.org/CVERecord?id=CVE-2010-1452
nvd.nist.gov/vuln/detail/CVE-2010-1452
access.redhat.com/security/cve/CVE-2010-1623
cve.org/CVERecord?id=CVE-2010-1623
nvd.nist.gov/vuln/detail/CVE-2010-1623
access.redhat.com/security/cve/CVE-2011-0419
cve.org/CVERecord?id=CVE-2011-0419
nvd.nist.gov/vuln/detail/CVE-2011-0419
access.redhat.com/security/cve/CVE-2012-4557
bugzilla.redhat.com/show_bug.cgi?id=871685
cve.org/CVERecord?id=CVE-2012-4557
nvd.nist.gov/vuln/detail/CVE-2012-4557
Left out here: 76 package rows. The JSON record has them.