Every CVE Search/ Get API key

CVE-2023-35887

Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

5.0 MediumPublic exploitFix available

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.31%Up 1.3 points since Jul 11, 2023
90%50%10%1%

What each source reports

CVE List Score used 5.0

Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Record
CVE-2023-35887
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
EUVDEUVD-2023-2101 5.0

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Record
EUVD-2023-2101
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-mjmq-gwgm-5qhm 5.0

Apache MINA SSHD information disclosure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.9.3 Users are recommended to upgrade to 2.9.3

Until version 2.1.0, some of the code affected by this vulnerability appeared in org.apache.sshd:sshd-core. Version 2.1.0 contains a commit where the code was moved to the package org.apache.sshd:sshd-common, which did not exist until version 2.1.0.

Record
GHSA-mjmq-gwgm-5qhm
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-22, CWE-200
Updated
2026-11-02
NVD 5.0

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Record
CVE-2023-35887
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
OSV 5.0

Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Record
CVE-2023-35887
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
OSVGHSA-mjmq-gwgm-5qhm 5.0

Apache MINA SSHD information disclosure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.9.3 Users are recommended to upgrade to 2.9.3

Until version 2.1.0, some of the code affected by this vulnerability appeared in org.apache.sshd:sshd-core. Version 2.1.0 contains a commit where the code was moved to the package org.apache.sshd:sshd-common, which did not exist until version 2.1.0.

Record
GHSA-mjmq-gwgm-5qhm
CVSS 3.1
5.0 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness
CWE-200, CWE-22
Updated
2026-11-02
Show 6 moreShow less
OSVOESA-2024-1079 4.3

apache-sshd security update

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side.

Security Fix(es):

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10 (CVE-2023-35887)

Record
OESA-2024-1079
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:7637 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update

Record
RHSA-2023:7637
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7638 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update

Record
RHSA-2023:7638
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:7639 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update

Record
RHSA-2023:7639
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1192 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update

Record
RHSA-2024:1192
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:1193 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update

Record
RHSA-2024:1193
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.sshd:sshd-core
Maven
 1.0.0 up to 2.1.0
2.1.0
org.apache.sshd:sshd-common
Maven
 2.1.0 up to 2.9.3
2.9.3
org.apache.sshd:sshd-sftp
Maven
 1.0.0 up to 2.9.3
2.9.3
org.apache.sshd:sshd-common
Maven
 2.1.0 up to 2.9.3, plus listed versions
2.2.02.3.02.4.02.5.02.5.1
Show 6 moreShow less
2.6.02.7.02.8.02.9.02.9.12.9.2
2.9.3
org.apache.sshd:sshd-sftp
Maven
 1.0.0 up to 2.9.3, plus listed versions
2.0.02.1.02.2.02.3.02.4.0
Show 8 moreShow less
2.5.02.5.12.6.02.7.02.8.02.9.02.9.12.9.2
2.9.3
org.apache.sshd:sshd-core
Maven
 1.0.0 up to 2.1.0, plus listed versions
1.1.01.1.11.2.01.3.01.4.01.6.01.7.02.0.0
2.1.0
apache-sshd
openEuler:20.03-LTS-SP1
 before 2.9.2-2.oe1
2.9.2-2.oe1
apache-sshd
openEuler:20.03-LTS-SP4
 before 2.9.2-2.oe2003sp4
2.9.2-2.oe2003sp4
apache-sshd
openEuler:22.03-LTS
 before 2.9.2-2.oe2203sp3
2.9.2-2.oe2203sp3
apache-sshd
openEuler:22.03-LTS-SP1
 before 2.9.2-2.oe2203sp1
2.9.2-2.oe2203sp1
Show 215 moreShow less
Affected packages
PackageAffectedFixed
apache-sshd
openEuler:22.03-LTS-SP2
 before 2.9.2-2.oe2203sp2
2.9.2-2.oe2203sp2
apache-sshd
openEuler:22.03-LTS-SP3
 before 2.9.2-2.oe2203sp3
2.9.2-2.oe2203sp3
eap7-guava
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el7eap
0:32.1.1-2.jre_redhat_00001.1.el7eap
eap7-guava-libraries
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el7eap
0:32.1.1-2.jre_redhat_00001.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.2.28-1.SP1_redhat_00001.1.el7eap
0:2.2.28-1.SP1_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el7eap
0:7.4.14-5.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el7eap
0:7.4.14-5.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el7eap
0:7.4.14-5.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el7eap
0:7.4.14-5.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el7eap
0:7.4.14-5.GA_redhat_00002.1.el7eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.8.11-1.SP1_redhat_00001.1.el7eap
0:3.8.11-1.SP1_redhat_00001.1.el7eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el7eap
0:2.16.0-17.redhat_00051.1.el7eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.9.3-1.redhat_00001.1.el7eap
0:2.9.3-1.redhat_00001.1.el7eap
eap7-avro
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.11.3-1.redhat_00001.1.el7eap
0:1.11.3-1.redhat_00001.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.3.20-1.Final_redhat_00001.1.el7eap
0:3.3.20-1.Final_redhat_00001.1.el7eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el7eap
0:5.3.32-1.Final_redhat_00001.1.el7eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el7eap
0:5.3.32-1.Final_redhat_00001.1.el7eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el7eap
0:5.3.32-1.Final_redhat_00001.1.el7eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el7eap
0:5.3.32-1.Final_redhat_00001.1.el7eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el7eap
0:5.3.32-1.Final_redhat_00001.1.el7eap
eap7-infinispan
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-cachestore-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-cachestore-remote
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-client-hotrod
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-commons
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-component-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-commons
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-infinispan-hibernate-cache-v53
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el7eap
0:11.0.18-1.Final_redhat_00001.1.el7eap
eap7-jandex
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.4.4-1.Final_redhat_00001.1.el7eap
0:2.4.4-1.Final_redhat_00001.1.el7eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.0.1-1.Final_redhat_00001.1.el7eap
0:2.0.1-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el7eap
0:2.0.14-1.SP1_redhat_00001.1.el7eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el7eap
0:2.0.14-1.SP1_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el7eap
0:1.10.0-33.Final_redhat_00032.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el7eap
0:1.10.0-33.Final_redhat_00032.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el7eap
0:1.10.0-33.Final_redhat_00032.1.el7eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:5.4.9-1.Final_redhat_00001.1.el7eap
0:5.4.9-1.Final_redhat_00001.1.el7eap
eap7-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:4.2.23-1.Final_redhat_00001.1.el7eap
0:4.2.23-1.Final_redhat_00001.1.el7eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el7eap
0:3.1.10-2.Final_redhat_00001.1.el7eap
eap7-wildfly-transaction-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.1.16-1.Final_redhat_00001.1.el7eap
0:1.1.16-1.Final_redhat_00001.1.el7eap
eap7-yasson
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 8 CVEs
 before 0:1.0.11-4.redhat_00002.1.el7eap
0:1.0.11-4.redhat_00002.1.el7eap
eap7-guava
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el8eap
0:32.1.1-2.jre_redhat_00001.1.el8eap
eap7-guava-libraries
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el8eap
0:32.1.1-2.jre_redhat_00001.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.2.28-1.SP1_redhat_00001.1.el8eap
0:2.2.28-1.SP1_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el8eap
0:7.4.14-5.GA_redhat_00002.1.el8eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.8.11-1.SP1_redhat_00001.1.el8eap
0:3.8.11-1.SP1_redhat_00001.1.el8eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el8eap
0:2.16.0-17.redhat_00051.1.el8eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.9.3-1.redhat_00001.1.el8eap
0:2.9.3-1.redhat_00001.1.el8eap
eap7-avro
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.11.3-1.redhat_00001.1.el8eap
0:1.11.3-1.redhat_00001.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.3.20-1.Final_redhat_00001.1.el8eap
0:3.3.20-1.Final_redhat_00001.1.el8eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el8eap
0:5.3.32-1.Final_redhat_00001.1.el8eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el8eap
0:5.3.32-1.Final_redhat_00001.1.el8eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el8eap
0:5.3.32-1.Final_redhat_00001.1.el8eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el8eap
0:5.3.32-1.Final_redhat_00001.1.el8eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el8eap
0:5.3.32-1.Final_redhat_00001.1.el8eap
eap7-infinispan
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-cachestore-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-cachestore-remote
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-client-hotrod
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-commons
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-component-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-commons
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-infinispan-hibernate-cache-v53
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el8eap
0:11.0.18-1.Final_redhat_00001.1.el8eap
eap7-jandex
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.4.4-1.Final_redhat_00001.1.el8eap
0:2.4.4-1.Final_redhat_00001.1.el8eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.0.1-1.Final_redhat_00001.1.el8eap
0:2.0.1-1.Final_redhat_00001.1.el8eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el8eap
0:2.0.14-1.SP1_redhat_00001.1.el8eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el8eap
0:2.0.14-1.SP1_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el8eap
0:1.10.0-33.Final_redhat_00032.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el8eap
0:1.10.0-33.Final_redhat_00032.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el8eap
0:1.10.0-33.Final_redhat_00032.1.el8eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:5.4.9-1.Final_redhat_00001.1.el8eap
0:5.4.9-1.Final_redhat_00001.1.el8eap
eap7-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:4.2.23-1.Final_redhat_00001.1.el8eap
0:4.2.23-1.Final_redhat_00001.1.el8eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el8eap
0:3.1.10-2.Final_redhat_00001.1.el8eap
eap7-wildfly-transaction-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.1.16-1.Final_redhat_00001.1.el8eap
0:1.1.16-1.Final_redhat_00001.1.el8eap
eap7-yasson
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 8 CVEs
 before 0:1.0.11-4.redhat_00002.1.el8eap
0:1.0.11-4.redhat_00002.1.el8eap
eap7-guava
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el9eap
0:32.1.1-2.jre_redhat_00001.1.el9eap
eap7-guava-libraries
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:32.1.1-2.jre_redhat_00001.1.el9eap
0:32.1.1-2.jre_redhat_00001.1.el9eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.2.28-1.SP1_redhat_00001.1.el9eap
0:2.2.28-1.SP1_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:7.4.14-5.GA_redhat_00002.1.el9eap
0:7.4.14-5.GA_redhat_00002.1.el9eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.8.11-1.SP1_redhat_00001.1.el9eap
0:3.8.11-1.SP1_redhat_00001.1.el9eap
eap7-activemq-artemis
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-jms-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-jms-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-ra
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-service-extensions
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-activemq-artemis-tools
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.16.0-17.redhat_00051.1.el9eap
0:2.16.0-17.redhat_00051.1.el9eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.9.3-1.redhat_00001.1.el9eap
0:2.9.3-1.redhat_00001.1.el9eap
eap7-avro
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.11.3-1.redhat_00001.1.el9eap
0:1.11.3-1.redhat_00001.1.el9eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.3.20-1.Final_redhat_00001.1.el9eap
0:3.3.20-1.Final_redhat_00001.1.el9eap
eap7-hibernate
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el9eap
0:5.3.32-1.Final_redhat_00001.1.el9eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el9eap
0:5.3.32-1.Final_redhat_00001.1.el9eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:5.3.32-1.Final_redhat_00001.1.el9eap
0:5.3.32-1.Final_redhat_00001.1.el9eap
eap7-infinispan
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-cachestore-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-cachestore-remote
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-client-hotrod
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-commons
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-component-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-hibernate-cache-commons
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-hibernate-cache-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-infinispan-hibernate-cache-v53
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:11.0.18-1.Final_redhat_00001.1.el9eap
0:11.0.18-1.Final_redhat_00001.1.el9eap
eap7-jandex
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.4.4-1.Final_redhat_00001.1.el9eap
0:2.4.4-1.Final_redhat_00001.1.el9eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.0.1-1.Final_redhat_00001.1.el9eap
0:2.0.1-1.Final_redhat_00001.1.el9eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el9eap
0:2.0.14-1.SP1_redhat_00001.1.el9eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:2.0.14-1.SP1_redhat_00001.1.el9eap
0:2.0.14-1.SP1_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el9eap
0:1.10.0-33.Final_redhat_00032.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el9eap
0:1.10.0-33.Final_redhat_00032.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.10.0-33.Final_redhat_00032.1.el9eap
0:1.10.0-33.Final_redhat_00032.1.el9eap
eap7-jbossws-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:5.4.9-1.Final_redhat_00001.1.el9eap
0:5.4.9-1.Final_redhat_00001.1.el9eap
eap7-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:4.2.23-1.Final_redhat_00001.1.el9eap
0:4.2.23-1.Final_redhat_00001.1.el9eap
eap7-weld-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-core-jsf
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-ejb
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-jta
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-probe-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-weld-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:3.1.10-2.Final_redhat_00001.1.el9eap
0:3.1.10-2.Final_redhat_00001.1.el9eap
eap7-wildfly-transaction-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.1.16-1.Final_redhat_00001.1.el9eap
0:1.1.16-1.Final_redhat_00001.1.el9eap
eap7-yasson
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 8 CVEs
 before 0:1.0.11-4.redhat_00002.1.el9eap
0:1.0.11-4.redhat_00002.1.el9eap
eap8-apache-sshd
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:2.12.0-1.redhat_00001.1.el8eap
0:2.12.0-1.redhat_00001.1.el8eap
eap8-eclipse-jgit
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:6.6.1.202309021850-1.r_redhat_00001.1.el8eap
0:6.6.1.202309021850-1.r_redhat_00001.1.el8eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:2.19.0-2.redhat_00001.1.el8eap
0:2.19.0-2.redhat_00001.1.el8eap
eap8-lucene-analyzers-common
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-facet
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-join
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-queries
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-queryparser
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-lucene-solr
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el8eap
0:8.11.2-2.redhat_00001.1.el8eap
eap8-parsson
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:1.1.5-1.redhat_00001.1.el8eap
0:1.1.5-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el8eap
0:8.0.1-3.GA_redhat_00002.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el8eap
0:8.0.1-3.GA_redhat_00002.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el8eap
0:8.0.1-3.GA_redhat_00002.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el8eap
0:8.0.1-3.GA_redhat_00002.1.el8eap
eap8-apache-sshd
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:2.12.0-1.redhat_00001.1.el9eap
0:2.12.0-1.redhat_00001.1.el9eap
eap8-eclipse-jgit
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:6.6.1.202309021850-1.r_redhat_00001.1.el9eap
0:6.6.1.202309021850-1.r_redhat_00001.1.el9eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:2.19.0-2.redhat_00001.1.el9eap
0:2.19.0-2.redhat_00001.1.el9eap
eap8-lucene-analyzers-common
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-facet
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-join
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-queries
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-queryparser
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-lucene-solr
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.11.2-2.redhat_00001.1.el9eap
0:8.11.2-2.redhat_00001.1.el9eap
eap8-parsson
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:1.1.5-1.redhat_00001.1.el9eap
0:1.1.5-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el9eap
0:8.0.1-3.GA_redhat_00002.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el9eap
0:8.0.1-3.GA_redhat_00002.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el9eap
0:8.0.1-3.GA_redhat_00002.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 4 CVEs
 before 0:8.0.1-3.GA_redhat_00002.1.el9eap
0:8.0.1-3.GA_redhat_00002.1.el9eap

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubshoucheng3/apache__mina-sshd_CVE-2023-35887_2-9-22025-08-18

History

History
RecordedChangedSources
affected, facts
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-35887 is a medium vulnerability (CVSS 5.0) in Apache Sshd, published July 10, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.31%, the 70th percentile. Fixed in org.apache.sshd:sshd-core 2.1.0.

References

Show 98 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open