CVE-2013-4286

Apache Tomcat is vulnerable to HTTP request-smuggling

5.8 MediumFix available

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header. NOTE: this vulnerability exists because of an incomplete fix for CVE-2005-2090.

Exploit likelihood

16.2%Up 8.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.8

Record: CVE-2013-4286
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-4286
Updated: 2026-11-02

EUVDEUVD-2022-4269 No score

Record: EUVD-2022-4269
Updated: 2026-11-02

GitHub AdvisoriesGHSA-j448-j653-r3vj No score

Apache Tomcat is vulnerable to HTTP request-smuggling

Record: GHSA-j448-j653-r3vj
Weakness: CWE-20
Updated: 2026-11-02

OSVGHSA-j448-j653-r3vj No score

Apache Tomcat is vulnerable to HTTP request-smuggling

Record: GHSA-j448-j653-r3vj
Weakness: CWE-20
Updated: 2026-11-02

OSVMGASA-2014-0148 No score

Updated tomcat package fixes security vulnerabilities

Apache Tomcat 7.x before 7.0.47, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers to trigger incorrect identification of a request's length and conduct request-smuggling attacks via (1) multiple Content-Length headers or (2) a Content-Length header and a "Transfer-Encoding: chunked" header (CVE-2013-4286).

Apache Tomcat 7.x before 7.0.50 processes chunked transfer coding without properly handling (1) a large total amount of chunked data or (2) whitespace characters in an HTTP header value within a trailer field, which allows remote attackers to cause a denial of service by streaming data (CVE-2013-4322).

Apache Tomcat 7.x before 7.0.50 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, *.jspx, *.tagx, or *.tld XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue (CVE-2013-4590).

Record: MGASA-2014-0148
Updated: 2026-11-02

OSVMGASA-2014-0149 No score

Updated tomcat package fixes security vulnerabilities

Record: MGASA-2014-0149
Updated: 2026-11-02

OSVUBUNTU-CVE-2013-4286 No score

Record: UBUNTU-CVE-2013-4286
Updated: 2026-11-02

Affected products

apache tomcat

Affected packages

Affected packages
Package	Affected	Fixed
`org.apache.tomcat:tomcat` Maven	before 6.0.39	6.0.39
`org.apache.tomcat:tomcat` Maven	7.0.0 up to 7.0.47	7.0.47
`org.apache.tomcat:tomcat` Maven	8.0.0-RC1 up to 8.0.0-RC3	8.0.0-RC3
`tomcat6` Debian:6.0 From an advisory covering 4 CVEs	before 6.0.41-2+squeeze5, plus listed versions 6.0.28-106.0.28-96.0.28-9+squeeze16.0.32-16.0.32-2 Show 21 moreShow less 6.0.32-36.0.32-46.0.32-56.0.32-66.0.32-76.0.33-16.0.35-16.0.35-1+squeeze26.0.35-1+squeeze36.0.35-1+squeeze46.0.35-26.0.35-36.0.35-46.0.35-56.0.35-5+nmu16.0.35-66.0.35-76.0.37-16.0.39-16.0.41-16.0.41-2	6.0.41-2+squeeze5
`tomcat7` Debian:7 From an advisory covering 6 CVEs	before 7.0.28-4+deb7u1, plus listed versions 7.0.28-4	7.0.28-4+deb7u1
`tomcat6` Debian:7 From an advisory covering 18 CVEs	before 6.0.45+dfsg-1~deb7u1, plus listed versions 6.0.35-66.0.35-6+deb7u16.0.35-76.0.37-16.0.39-1 Show 8 moreShow less 6.0.41-16.0.41-26.0.41-2+squeeze56.0.41-2+squeeze66.0.41-2+squeeze76.0.41-36.0.41-46.0.45-1~deb6u1	6.0.45+dfsg-1~deb7u1
`org.apache.tomcat:tomcat` Maven	7.0.0 up to 7.0.47, plus listed versions 7.0.357.0.377.0.397.0.407.0.417.0.42	7.0.47
`tomcat` Mageia:3 From an advisory covering 3 CVEs	before 7.0.52-1.mga3	7.0.52-1.mga3
`tomcat` Mageia:4 From an advisory covering 3 CVEs	before 7.0.52-1.mga4	7.0.52-1.mga4
`apache-cxf` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:2.7.10-1.redhat_1.1.ep6.el5	0:2.7.10-1.redhat_1.1.ep6.el5

Show 287 moreShow less

Affected packages
Package	Affected	Fixed
`glassfish-jsf-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:2.1.27-6.redhat_8.1.ep6.el5	0:2.1.27-6.redhat_8.1.ep6.el5
`jboss-ejb-client` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.25-1.Final_redhat_1.1.ep6.el5	0:1.0.25-1.Final_redhat_1.1.ep6.el5
`jboss-jsf-api_2.1_spec` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:2.1.27-2.Final_redhat_1.1.ep6.el5	0:2.1.27-2.Final_redhat_1.1.ep6.el5
`jboss-metadata` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-metadata-appclient` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-metadata-common` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-metadata-ear` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-metadata-ejb` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-metadata-web` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el5	0:7.0.9-1.Final_redhat_1.1.ep6.el5
`jboss-remote-naming` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.8-1.Final_redhat_1.1.ep6.el5	0:1.0.8-1.Final_redhat_1.1.ep6.el5
`jboss-remoting3` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:3.2.19-1.GA_redhat_1.1.ep6.el5	0:3.2.19-1.GA_redhat_1.1.ep6.el5
`jboss-security-negotiation` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:2.2.7-1.Final_redhat_1.1.ep6.el5	0:2.2.7-1.Final_redhat_1.1.ep6.el5
`jbossws-cxf` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:4.2.4-1.Final_redhat_1.1.ep6.el5	0:4.2.4-1.Final_redhat_1.1.ep6.el5
`picketbox` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:4.0.19-4.SP4_redhat_1.1.ep6.el5	0:4.0.19-4.SP4_redhat_1.1.ep6.el5
`wss4j` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.6.14-2.redhat_1.1.ep6.el5	0:1.6.14-2.redhat_1.1.ep6.el5
`ironjacamar-common-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-common-impl-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-common-spi-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-core-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-core-impl-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-deployers-common-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-jdbc-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-spec-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`ironjacamar-validator-eap6` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el5	0:1.0.23-5.Final_redhat_5.1.ep6.el5
`jboss-as-appclient` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-cli` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-client-all` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-clustering` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-cmp` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-configadmin` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-connector` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-controller` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-controller-client` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-core-security` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-deployment-repository` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-deployment-scanner` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-domain-http` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-domain-management` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-ee` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-ee-deployment` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-ejb3` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-embedded` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-host-controller` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jacorb` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jaxr` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jaxrs` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jdr` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jmx` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jpa` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jsf` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-jsr77` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-logging` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-mail` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-management-client-content` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-messaging` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-modcluster` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-naming` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-network` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-osgi` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-osgi-configadmin` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-osgi-service` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-platform-mbean` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-pojo` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-process-controller` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-protocol` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-remoting` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-sar` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-security` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-server` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-system-jmx` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-threads` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-transactions` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-version` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-web` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-webservices` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-weld` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-as-xts` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jboss-el-api_2.2_spec` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.0.4-2.Final_redhat_1.1.ep6.el5	0:1.0.4-2.Final_redhat_1.1.ep6.el5
`jboss-modules` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:1.3.3-1.Final_redhat_1.1.ep6.el5	0:1.3.3-1.Final_redhat_1.1.ep6.el5
`jbossas-core` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jbossas-javadocs` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.1.Final_redhat_2.ep6.el5	0:7.3.2-2.1.Final_redhat_2.ep6.el5
`jbossas-modules-eap` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jbossas-product-eap` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el5	0:7.3.2-2.Final_redhat_2.1.ep6.el5
`jbossweb` Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs	before 0:7.3.1-1.Final_redhat_1.1.ep6.el5	0:7.3.1-1.Final_redhat_1.1.ep6.el5
`apache-cxf` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:2.7.10-1.redhat_1.1.ep6.el6	0:2.7.10-1.redhat_1.1.ep6.el6
`glassfish-jsf-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:2.1.27-6.redhat_8.1.ep6.el6	0:2.1.27-6.redhat_8.1.ep6.el6
`jboss-ejb-client` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.25-1.Final_redhat_1.1.ep6.el6	0:1.0.25-1.Final_redhat_1.1.ep6.el6
`jboss-jsf-api_2.1_spec` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:2.1.27-2.Final_redhat_1.1.ep6.el6	0:2.1.27-2.Final_redhat_1.1.ep6.el6
`jboss-metadata` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-metadata-appclient` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-metadata-common` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-metadata-ear` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-metadata-ejb` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-metadata-web` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.0.9-1.Final_redhat_1.1.ep6.el6	0:7.0.9-1.Final_redhat_1.1.ep6.el6
`jboss-remote-naming` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.8-1.Final_redhat_1.1.ep6.el6	0:1.0.8-1.Final_redhat_1.1.ep6.el6
`jboss-remoting3` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:3.2.19-1.GA_redhat_1.1.ep6.el6	0:3.2.19-1.GA_redhat_1.1.ep6.el6
`jboss-security-negotiation` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:2.2.7-1.Final_redhat_1.1.ep6.el6	0:2.2.7-1.Final_redhat_1.1.ep6.el6
`jbossws-cxf` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:4.2.4-1.Final_redhat_1.1.ep6.el6	0:4.2.4-1.Final_redhat_1.1.ep6.el6
`picketbox` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:4.0.19-4.SP4_redhat_1.1.ep6.el6	0:4.0.19-4.SP4_redhat_1.1.ep6.el6
`wss4j` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.6.14-2.redhat_1.1.ep6.el6	0:1.6.14-2.redhat_1.1.ep6.el6
`ironjacamar-common-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-common-impl-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-common-spi-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-core-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-core-impl-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-deployers-common-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-jdbc-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-spec-api-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`ironjacamar-validator-eap6` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.23-5.Final_redhat_5.1.ep6.el6	0:1.0.23-5.Final_redhat_5.1.ep6.el6
`jboss-as-appclient` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-cli` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-client-all` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-clustering` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-cmp` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-configadmin` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-connector` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-controller` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-controller-client` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-core-security` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-deployment-repository` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-deployment-scanner` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-domain-http` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-domain-management` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-ee` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-ee-deployment` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-ejb3` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-embedded` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-host-controller` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jacorb` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jaxr` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jaxrs` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jdr` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jmx` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jpa` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jsf` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-jsr77` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-logging` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-mail` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-management-client-content` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-messaging` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-modcluster` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-naming` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-network` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-osgi` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-osgi-configadmin` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-osgi-service` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-platform-mbean` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-pojo` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-process-controller` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-protocol` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-remoting` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-sar` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-security` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-server` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-system-jmx` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-threads` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-transactions` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-version` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-web` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-webservices` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-weld` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-as-xts` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jboss-el-api_2.2_spec` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.0.4-2.Final_redhat_1.1.ep6.el6	0:1.0.4-2.Final_redhat_1.1.ep6.el6
`jboss-modules` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:1.3.3-1.Final_redhat_1.1.ep6.el6	0:1.3.3-1.Final_redhat_1.1.ep6.el6
`jbossas-core` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jbossas-javadocs` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.1.Final_redhat_2.ep6.el6	0:7.3.2-2.1.Final_redhat_2.ep6.el6
`jbossas-modules-eap` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jbossas-product-eap` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.2-2.Final_redhat_2.1.ep6.el6	0:7.3.2-2.Final_redhat_2.1.ep6.el6
`jbossweb` Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs	before 0:7.3.1-1.Final_redhat_1.1.ep6.el6	0:7.3.1-1.Final_redhat_1.1.ep6.el6
`tomcat6` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-javadoc` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-lib` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-webapps` Red Hat:enterprise_linux:6::client From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-javadoc` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-lib` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-webapps` Red Hat:enterprise_linux:6::computenode From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-lib` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-javadoc` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-webapps` Red Hat:enterprise_linux:6::server From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-lib` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-javadoc` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6-webapps` Red Hat:enterprise_linux:6::workstation From an advisory covering 3 CVEs	before 0:6.0.24-64.el6_5	0:6.0.24-64.el6_5
`tomcat6` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-el-2.1-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 4 CVEs	before 0:6.0.37-19_patch_04.ep6.el5	0:6.0.37-19_patch_04.ep6.el5
`tomcat6` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-el-2.1-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 4 CVEs	before 0:6.0.37-27_patch_04.ep6.el6	0:6.0.37-27_patch_04.ep6.el6
`tomcat7` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-el-2.2-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-javadoc` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-jsp-2.2-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-lib` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-log4j` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-servlet-3.0-api` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7-webapps` Red Hat:jboss_enterprise_web_server:2::el5 From an advisory covering 3 CVEs	before 0:7.0.40-13_patch_02.ep6.el5	0:7.0.40-13_patch_02.ep6.el5
`tomcat7` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-el-2.2-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-javadoc` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-jsp-2.2-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-lib` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-log4j` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-servlet-3.0-api` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat7-webapps` Red Hat:jboss_enterprise_web_server:2::el6 From an advisory covering 3 CVEs	before 0:7.0.40-9_patch_02.ep6.el6	0:7.0.40-9_patch_02.ep6.el6
`tomcat` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-servlet-3.0-api` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-admin-webapps` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-docs-webapp` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-el-2.2-api` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-javadoc` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsp-2.2-api` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsvc` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-lib` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-webapps` Red Hat:enterprise_linux:7::client From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-servlet-3.0-api` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-admin-webapps` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-docs-webapp` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-el-2.2-api` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-javadoc` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsp-2.2-api` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsvc` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-lib` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-webapps` Red Hat:enterprise_linux:7::computenode From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-admin-webapps` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-el-2.2-api` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsp-2.2-api` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-lib` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-servlet-3.0-api` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-webapps` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-docs-webapp` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-javadoc` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsvc` Red Hat:enterprise_linux:7::server From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-admin-webapps` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-el-2.2-api` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsp-2.2-api` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-lib` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-servlet-3.0-api` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-webapps` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-docs-webapp` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-javadoc` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0
`tomcat-jsvc` Red Hat:enterprise_linux:7::workstation From an advisory covering 3 CVEs	before 0:7.0.42-5.el7_0	0:7.0.42-5.el7_0

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4286 is a medium vulnerability (CVSS 5.8) in Apache Tomcat, published February 26, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.2%, the 96th percentile. Fixed in org.apache.tomcat:tomcat 6.0.39.

References

Show 142 moreShow less