CVE-2009-0580
Exposure of Sensitive Information in Apache Tomcat
4.3 MediumPublic exploitFix available
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
Exploit likelihood
94.4%Up 10.9 points since Feb 4, 2022
What each source reports
NVD Score used
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
- Record
CVE-2009-0580- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
- Record
CVE-2009-0580- Updated
- 2026-11-02
EUVDEUVD-2022-5460 No score
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
- Record
EUVD-2022-5460- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w227-xcfx-3pj8 No score
Exposure of Sensitive Information in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
- Record
GHSA-w227-xcfx-3pj8- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVGHSA-w227-xcfx-3pj8 No score
Exposure of Sensitive Information in Apache Tomcat
Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requests to /j_security_check with malformed URL encoding of passwords, related to improper error checking in the (1) MemoryRealm, (2) DataSourceRealm, and (3) JDBCRealm authentication realms, as demonstrated by a % (percent) value for the j_password parameter.
- Record
GHSA-w227-xcfx-3pj8- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven |
4.1.0 up to 4.1.40 | 4.1.40 |
org.apache.tomcat:tomcatMaven |
5.0.0 up to 5.5.28 | 5.5.28 |
org.apache.tomcat:tomcatMaven |
6.0.0 up to 6.0.19 | 6.0.19 |
tomcat5.5Debian:5.0 From an advisory covering 9 CVEs |
before 5.5.26-5lenny2, plus listed versions 5.5.26-5 |
5.5.26-5lenny2 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
Show 242 moreShow less
| Package | Affected | Fixed |
|---|---|---|
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el5 | 0:2.1-9.2.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el5 | 0:1.4.1-6.SP13.1.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el5 | 0:2.2.3-2.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.13.el5 | 0:1.2.1-1.ep1.13.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.13.el5 | 0:1.2.1-1.ep1.13.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbossas-4.2.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.1.ep1.el5 | 0:4.2.0-4.GA_CP07.5.1.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el5 | 0:2.0.0-6.CP11.0jpp.ep1.1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el5 | 1:2.4.6-1.ep1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.1.el5 | 0:4.2.0-5.GA_CP07.ep1.1.1.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.1.el5 | 0:4.2.0-5.GA_CP07.ep1.1.1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 | 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el4 | 0:2.1-9.2.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el4 | 0:1.4.1-6.SP13.1.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el4 | 0:2.2.3-2.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.19.el4 | 0:1.2.1-1.ep1.19.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-1.ep1.19.el4 | 0:1.2.1-1.ep1.19.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbossas-4.2.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-4.GA_CP07.5.ep1.el4 | 0:4.2.0-4.GA_CP07.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el4 | 0:2.0.0-6.CP11.0jpp.ep1.1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el4 | 1:2.4.6-1.ep1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.el4 | 0:4.2.0-5.GA_CP07.ep1.1.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:4.2.0-5.GA_CP07.ep1.1.el4 | 0:4.2.0-5.GA_CP07.ep1.1.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 3 CVEs |
before 0:2.7.1-9jpp.ep1.2.el4 | 0:2.7.1-9jpp.ep1.2.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.1.ep1.el5 | 0:2.1.4-1.11.1.ep1.el5 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.1.ep1.el5 | 0:2.1.4-1.11.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.1GA_CP01.ep1.el5 | 0:3.3.1-1.10.1GA_CP01.ep1.el5 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.2.el5 | 0:3.0.0-1jpp.ep1.5.2.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.1.ep1.el5 | 0:3.3.2-2.4.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.3.el5 | 0:3.0.0-1jpp.ep1.8.3.el5 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el5 | 0:2.1-9.2.el5 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el5 | 0:1.4.1-6.SP13.1.ep1.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.4.0-2.SP3_CP08.1.ep1.el5 | 0:1.4.0-2.SP3_CP08.1.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el5 | 0:2.2.3-2.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.11.el5.1 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbossas-4.3.0.GA_CP05-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.1.ep1.el5 | 0:4.3.0-4.GA_CP05.6.1.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el5 | 0:2.0.0-6.CP11.0jpp.ep1.1.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 | 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.0.0-2.GA_CP04.1.ep1.el5 | 0:1.0.0-2.GA_CP04.1.ep1.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-1.GA_CP04.2.ep1.el5 | 0:2.0.1-1.GA_CP04.2.ep1.el5 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 | 0:2.0.1-3.SP2_CP06.3.1.ep1.el5 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:1.0.0-1.GA_CP02.1.ep1.el5 | 0:1.0.0-1.GA_CP02.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el5 | 1:2.4.6-1.ep1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.1.el5 | 0:4.3.0-5.GA_CP05.ep1.2.1.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.1.el5 | 0:4.3.0-5.GA_CP05.ep1.2.1.el5 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.ep1.el4 | 0:2.1.4-1.11.ep1.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1.4-1.11.ep1.el4 | 0:2.1.4-1.11.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.1-1.10.GA_CP01.ep1.el4 | 0:3.3.1-1.10.GA_CP01.ep1.el4 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-commons-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.5.el4 | 0:3.0.0-1jpp.ep1.5.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.3.2-2.4.ep1.el4 | 0:3.3.2-2.4.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 | 1:3.2.4-1.SP1_CP08.0jpp.ep1.2.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hibernate3-validator-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:3.0.0-1jpp.ep1.8.el4 | 0:3.0.0-1jpp.ep1.8.el4 |
hsqldbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 | 1:1.8.0.8-2.patch02.1jpp.ep1.2.el4 |
jakarta-slide-webdavclientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.1-9.2.el4 | 0:2.1-9.2.el4 |
jboss-cacheRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.1-6.SP13.1.ep1.el4 | 0:1.4.1-6.SP13.1.ep1.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.4.0-2.SP3_CP08.1.ep1.el4 | 0:1.4.0-2.SP3_CP08.1.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.2.3-2.ep1.el4 | 0:2.2.3-2.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.15.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbossas-4.3.0.GA_CP05-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-4.GA_CP05.6.ep1.el4 | 0:4.3.0-4.GA_CP05.6.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP05.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.0-6.CP11.0jpp.ep1.1.el4 | 0:2.0.0-6.CP11.0jpp.ep1.1.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.ep1.el4 | 0:2.0.1-3.SP2_CP06.3.ep1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.0.0-2.GA_CP04.1.ep1.el4 | 0:1.0.0-2.GA_CP04.1.ep1.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-1.GA_CP04.2.ep1.el4 | 0:2.0.1-1.GA_CP04.2.ep1.el4 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.0.1-3.SP2_CP06.3.ep1.el4 | 0:2.0.1-3.SP2_CP06.3.ep1.el4 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:1.0.0-1.GA_CP02.1.ep1.el4 | 0:1.0.0-1.GA_CP02.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 1:2.4.6-1.ep1.el4 | 1:2.4.6-1.ep1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.el4 | 0:4.3.0-5.GA_CP05.ep1.2.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:4.3.0-5.GA_CP05.ep1.2.el4 | 0:4.3.0-5.GA_CP05.ep1.2.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 3 CVEs |
before 0:2.7.1-9jpp.ep1.2.el4 | 0:2.7.1-9jpp.ep1.2.el4 |
tomcat5Red Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-admin-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-common-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasperRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jasper-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-jsp-2.0-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-server-libRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-apiRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-servlet-2.4-api-javadocRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5-webappsRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp.7.el5_3.2 | 0:5.5.23-0jpp.7.el5_3.2 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-1.patch07.19.ep5.el4 | 0:5.5.23-1.patch07.19.ep5.el4 |
tomcat5Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-common-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasperRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jasper-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-jsp-2.0-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-server-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-servlet-2.4-api-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat5-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp.9.6.ep5.el5 | 0:5.5.23-0jpp.9.6.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el4 From an advisory covering 4 CVEs |
before 0:6.0.18-11.3.ep5.el4 | 0:6.0.18-11.3.ep5.el4 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 From an advisory covering 4 CVEs |
before 0:6.0.18-12.0.ep5.el5 | 0:6.0.18-12.0.ep5.el5 |
tomcat5Red Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-admin-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasper-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-api-javadocRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-webappsRed Hat:rhel_application_server:2 From an advisory covering 6 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5Red Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:rhel_developer_suite:3 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.2::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5Red Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-common-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jasperRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-jsp-2.0-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-server-libRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
tomcat5-servlet-2.4-apiRed Hat:network_satellite:5.3::el4 From an advisory covering 5 CVEs |
before 0:5.5.23-0jpp_18rh | 0:5.5.23-0jpp_18rh |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Apache Tomcat 6.0.18 - Form Authentication Existing/Non-Existing 'Username' Enumeration | 2009-06-03 |
| Metasploit | Apache Tomcat User Enumeration |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0580 is a medium vulnerability (CVSS 4.3) in Apache Tomcat, published June 5, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 94.4%, the 99th percentile. Fixed in org.apache.tomcat:tomcat 4.1.40.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9101
tomcat.apache.org/security-4.html
marc.info?l=bugtraq&m=127420533226623&w=2
secunia.com/advisories/35326
mandriva.com/security/advisories?name=MDVSA-2009:138
Show 194 moreShow less
redhat.com/archives/fedora-package-announce/2009-November/msg01246.html
debian.org/security/2011/dsa-2207
securityfocus.com/bid/35196
vupen.com/english/advisories/2010/3056
vmware.com/security/advisories/VMSA-2009-0016.html
svn.apache.org/viewvc?rev=747840&view=rev
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
securitytracker.com/id?1022332
support.apple.com/kb/HT4077
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
exchange.xforce.ibmcloud.com/vulnerabilities/50930
sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1
lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2009-0580
github.com/advisories/GHSA-w227-xcfx-3pj8
access.redhat.com/errata/RHSA-2009:1143
bugzilla.redhat.com/show_bug.cgi?id=499600
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1143.json
cve.org/CVERecord?id=CVE-2008-5515
This page doesn't list everything
Left out here: 52 references. The JSON record has them.