Every CVE Search/ Get API key

CVE-2023-52428

Denial of Service in Connect2id Nimbus JOSE+JWT

7.5 HighFix available

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.81%Up 0.8 points since Feb 11, 2024
90%50%10%1%

What each source reports

NVD Score used 7.5

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
CVE-2023-52428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
CVE List 7.5

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
CVE-2023-52428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
EUVDEUVD-2024-0644 7.5

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
EUVD-2024-0644
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-gvpg-vgmx-xg6w 8.7

Denial of Service in Connect2id Nimbus JOSE+JWT

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
GHSA-gvpg-vgmx-xg6w
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-770
Updated
2026-11-02
OSV 7.5

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
CVE-2023-52428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVGHSA-gvpg-vgmx-xg6w 8.7

Denial of Service in Connect2id Nimbus JOSE+JWT

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

Record
GHSA-gvpg-vgmx-xg6w
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-770
Updated
2026-11-02
Show 9 moreShow less
OSVRHLW-2026-0a6fc4430620d7b4 7.5

Lightwell Security Advisory: nimbus-jose-jwt 9.7.0.rhlw-00002

Red Hat Lightwell has released com.nimbusds:nimbus-jose-jwt 9.7.0.rhlw-00002 with a backported security fix.

CVE-2023-52428: In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

This patched artifact is a drop-in replacement for com.nimbusds:nimbus-jose-jwt 9.7.0 from Maven Central.

Record
RHLW-2026-0a6fc4430620d7b4
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2024:8823 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8823
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:8824 7.7

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.4 Security update

Record
RHSA-2024:8824
CVSS 3.1
7.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVROOT-APP-MAVEN-CVE-2023-52428 7.5

CVE-2023-52428 in io.root.com.nimbusds:nimbus-jose-jwt - Patched by Root

Root has patched CVE-2023-52428 in the io.root.com.nimbusds:nimbus-jose-jwt package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-CVE-2023-52428
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2024-1723507378 No score

TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 9.22.tuxcare.

Record
CLSA-2024-1723507378
Updated
2026-11-02
OSVCLSA-2024-1733443230 No score

TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 9.24.4.tuxcare.

Record
CLSA-2024-1733443230
Updated
2026-11-02
OSVCLSA-2026-1778633125 No score

TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 8.23-tuxcare.1.

Record
CLSA-2026-1778633125
Updated
2026-11-02
OSVCLSA-2026-1780966316 No score

TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 9.23-tuxcare.1.

Record
CLSA-2026-1780966316
Updated
2026-11-02
OSVCLSA-2026-1793729810 No score

TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 9.8.1-tuxcare.2.

Record
CLSA-2026-1793729810
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
com.nimbusds:nimbus-jose-jwt
Maven
 before 9.37.2
9.37.2
com.nimbusds:nimbus-jose-jwt
TuxCare:Maven
 9.22 up to 9.22.tuxcare
9.22.tuxcare
com.nimbusds:nimbus-jose-jwt
TuxCare:Maven
 9.24.4 up to 9.24.4.tuxcare
9.24.4.tuxcare
com.nimbusds:nimbus-jose-jwt
TuxCare:Maven
 8.23 up to 8.23-tuxcare.1
8.23-tuxcare.1
com.nimbusds:nimbus-jose-jwt
TuxCare:Maven
 9.23 up to 9.23-tuxcare.1
9.23-tuxcare.1
com.nimbusds:nimbus-jose-jwt
TuxCare:Maven
 9.8.1 up to 9.8.1-tuxcare.2, plus listed versions
9.8.1-tuxcare.1
9.8.1-tuxcare.2
com.nimbusds:nimbus-jose-jwt
Maven
 before 9.37.2, plus listed versions
2.102.10.12.11.02.12.02.13.0
Show 45 moreShow less
2.13.12.14.02.15.02.15.12.15.22.162.172.17.12.17.22.182.18.12.18.22.192.19.12.202.212.222.22.12.232.242.252.262.26.12.93.03.13.1.13.1.23.103.23.2.13.2.23.33.43.53.63.73.83.8.13.8.23.93.9.13.9.24.04.0-rc1
9.37.2
com.nimbusds:nimbus-jose-jwt
Red Hat Lightwell:Maven
 before 9.7.0.rhlw-00002, plus listed versions
2.102.10.12.11.02.12.02.13.0
Show 45 moreShow less
2.13.12.14.02.15.02.15.12.15.22.162.172.17.12.17.22.182.18.12.18.22.192.19.12.202.212.222.22.12.232.242.252.262.26.12.93.03.13.1.13.1.23.103.23.2.13.2.23.33.43.53.63.73.83.8.13.8.23.93.9.13.9.24.04.0-rc1
9.7.0.rhlw-00002
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
Show 160 moreShow less
Affected packages
PackageAffectedFixed
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el8eap
0:2.33.0-1.redhat_00015.1.el8eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el8eap
0:1.8.0-2.redhat_00001.1.el8eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el8eap
0:2.2.0-2.redhat_00001.1.el8eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el8eap
0:1.16.1-2.redhat_00007.1.el8eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el8eap
0:3.2.2-28.redhat_2.1.el8eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el8eap
0:2.15.1-1.redhat_00001.1.el8eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el8eap
0:3.14.0-2.redhat_00006.1.el8eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el8eap
0:4.0.5-1.redhat_00001.1.el8eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el8eap
1:2.0.0-2.redhat_00005.1.el8eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el8eap
0:2.0.1-1.redhat_00002.1.el8eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el8eap
0:0.1.0-2.redhat_00010.1.el8eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el8eap
0:1.2.5-2.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el8eap
0:800.4.0-1.GA_redhat_00001.1.el8eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el8eap
0:2.1.0-4.redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el8eap
0:6.2.31-1.Final_redhat_00002.1.el8eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el8eap
0:8.0.1-3.Final_redhat_00001.1.el8eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el8eap
0:0.8.1-2.redhat_00001.1.el8eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el8eap
0:3.0.1-1.redhat_00001.1.el8eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el8eap
0:1.1.3-1.redhat_00001.1.el8eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el8eap
0:3.5.3-1.Final_redhat_00001.1.el8eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el8eap
0:4.0.2-1.redhat_00001.1.el8eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el8eap
0:5.3.10-1.Final_redhat_00001.1.el8eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el8eap
0:1.12.284-2.redhat_00002.1.el8eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el8eap
0:2.22.1-1.redhat_00002.1.el8eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el8eap
0:6.0.3-1.Final_redhat_00001.1.el8eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el8eap
0:9.37.3-1.redhat_00001.1.el8eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el8eap
0:9.6.0-1.redhat_00002.1.el8eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el8eap
0:2.3.0-1.redhat_00001.1.el8eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el8eap
0:3.0.1-2.Final_redhat_00001.1.el8eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el8eap
0:2.0.1-3.Final_redhat_00001.1.el8eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el8eap
0:3.0.4-1.redhat_00001.1.el8eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el8eap
0:8.0.0-6.redhat_00001.1.el8eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el8eap
0:2.0.16-1.redhat_00001.1.el8eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el8eap
0:2.2.0-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el8
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el8eap
0:8.0.4-2.GA_redhat_00005.1.el8eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.33.0-1.redhat_00015.1.el9eap
0:2.33.0-1.redhat_00015.1.el9eap
eap8-aesh-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.8.0-2.redhat_00001.1.el9eap
0:1.8.0-2.redhat_00001.1.el9eap
eap8-aesh-readline
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-2.redhat_00001.1.el9eap
0:2.2.0-2.redhat_00001.1.el9eap
eap8-apache-commons-codec
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.16.1-2.redhat_00007.1.el9eap
0:1.16.1-2.redhat_00007.1.el9eap
eap8-apache-commons-collections
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.2.2-28.redhat_2.1.el9eap
0:3.2.2-28.redhat_2.1.el9eap
eap8-apache-commons-io
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.15.1-1.redhat_00001.1.el9eap
0:2.15.1-1.redhat_00001.1.el9eap
eap8-apache-commons-lang
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.14.0-2.redhat_00006.1.el9eap
0:3.14.0-2.redhat_00006.1.el9eap
eap8-apache-cxf
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.5-1.redhat_00001.1.el9eap
0:4.0.5-1.redhat_00001.1.el9eap
eap8-artemis-native
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-native-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 1:2.0.0-2.redhat_00005.1.el9eap
1:2.0.0-2.redhat_00005.1.el9eap
eap8-artemis-wildfly-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-1.redhat_00002.1.el9eap
0:2.0.1-1.redhat_00002.1.el9eap
eap8-asyncutil
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.1.0-2.redhat_00010.1.el9eap
0:0.1.0-2.redhat_00010.1.el9eap
eap8-aws-java-sdk
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-kms
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-aws-java-sdk-s3
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-cryptacular
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.2.5-2.redhat_00001.1.el9eap
0:1.2.5-2.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:800.4.0-1.GA_redhat_00001.1.el9eap
0:800.4.0-1.GA_redhat_00001.1.el9eap
eap8-fastinfoset
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.1.0-4.redhat_00001.1.el9eap
0:2.1.0-4.redhat_00001.1.el9eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.2.31-1.Final_redhat_00002.1.el9eap
0:6.2.31-1.Final_redhat_00002.1.el9eap
eap8-hibernate-validator
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hibernate-validator-cdi
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.1-3.Final_redhat_00001.1.el9eap
0:8.0.1-3.Final_redhat_00001.1.el9eap
eap8-hppc
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:0.8.1-2.redhat_00001.1.el9eap
0:0.8.1-2.redhat_00001.1.el9eap
eap8-insights-java-client
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jakarta-servlet-jsp-jstl-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-1.redhat_00001.1.el9eap
0:3.0.1-1.redhat_00001.1.el9eap
eap8-jboss-cert-helper
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.1.3-1.redhat_00001.1.el9eap
0:1.1.3-1.redhat_00001.1.el9eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.5.3-1.Final_redhat_00001.1.el9eap
0:3.5.3-1.Final_redhat_00001.1.el9eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:4.0.2-1.redhat_00001.1.el9eap
0:4.0.2-1.redhat_00001.1.el9eap
eap8-jgroups
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:5.3.10-1.Final_redhat_00001.1.el9eap
0:5.3.10-1.Final_redhat_00001.1.el9eap
eap8-jmespath-java
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:1.12.284-2.redhat_00002.1.el9eap
0:1.12.284-2.redhat_00002.1.el9eap
eap8-log4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.22.1-1.redhat_00002.1.el9eap
0:2.22.1-1.redhat_00002.1.el9eap
eap8-narayana
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbosstxbridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jbossxts
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-idlj
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-jts-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-bridge
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-integration
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-narayana-restat-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:6.0.3-1.Final_redhat_00001.1.el9eap
0:6.0.3-1.Final_redhat_00001.1.el9eap
eap8-nimbus-jose-jwt
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.37.3-1.redhat_00001.1.el9eap
0:9.37.3-1.redhat_00001.1.el9eap
eap8-objectweb-asm
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-objectweb-asm-util
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:9.6.0-1.redhat_00002.1.el9eap
0:9.6.0-1.redhat_00002.1.el9eap
eap8-pem-keystore
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.3.0-1.redhat_00001.1.el9eap
0:2.3.0-1.redhat_00001.1.el9eap
eap8-resteasy-extensions
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-resteasy-spring
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.1-2.Final_redhat_00001.1.el9eap
0:3.0.1-2.Final_redhat_00001.1.el9eap
eap8-resteasy-tracing-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.1-3.Final_redhat_00001.1.el9eap
0:2.0.1-3.Final_redhat_00001.1.el9eap
eap8-saaj-impl
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:3.0.4-1.redhat_00001.1.el9eap
0:3.0.4-1.redhat_00001.1.el9eap
eap8-shibboleth-java-support
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.0-6.redhat_00001.1.el9eap
0:8.0.0-6.redhat_00001.1.el9eap
eap8-slf4j
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-slf4j-api
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.0.16-1.redhat_00001.1.el9eap
0:2.0.16-1.redhat_00001.1.el9eap
eap8-snakeyaml
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:2.2.0-1.redhat_00001.1.el9eap
0:2.2.0-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.0::el9
From an advisory covering 7 CVEs
 before 0:8.0.4-2.GA_redhat_00005.1.el9eap
0:8.0.4-2.GA_redhat_00005.1.el9eap
io.root.com.nimbusds:nimbus-jose-jwt
Root:Maven
 before 9.31-root.io.1
9.31-root.io.19.31-root.io.2
com.nimbusds:nimbus-jose-jwt
Root:Maven
 before 9.31-aikido.2
9.31-aikido.2

History

History
RecordedChangedSources
affected
affected, aliases, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52428 is a high vulnerability (CVSS 7.5) in Connect2id Nimbus Jose\+jwt, published February 11, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. Fixed in com.nimbusds:nimbus-jose-jwt 9.37.2.

References

Show 61 moreShow less
This page doesn't list everything

Left out here: 376 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open