CVE-2023-4639
Undertow: cookie smuggling/spoofing
7.4 HighFix available
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
1.09%Up 1.0 points since Nov 18, 2024
What each source reports
CVE List Score used
Undertow: cookie smuggling/spoofing
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
CVE-2023-4639- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-444
- Updated
- 2026-11-02
EUVDEUVD-2024-3185
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
EUVD-2024-3185- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3jrv-jgp8-45v3
Undertow incorrectly parses cookies
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
GHSA-3jrv-jgp8-45v3- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-444
- Updated
- 2026-11-02
NVD
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
CVE-2023-4639- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-444
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-4639
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
DEBIAN-CVE-2023-4639- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVGHSA-3jrv-jgp8-45v3
Undertow incorrectly parses cookies
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
GHSA-3jrv-jgp8-45v3- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-444
- Updated
- 2026-11-02
Show 11 moreShow less
OSVRHSA-2024:1674
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
- Record
RHSA-2024:1674- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1675
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
- Record
RHSA-2024:1675- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1676
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
- Record
RHSA-2024:1676- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:2764
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update
- Record
RHSA-2024:2764- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-4639
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
UBUNTU-CVE-2023-4639- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVCLSA-2025-1766016491 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.1.
- Record
CLSA-2025-1766016491- Updated
- 2026-11-02
OSVCLSA-2026-1780966317 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.0.Final-tuxcare.1.
- Record
CLSA-2026-1780966317- Updated
- 2026-11-02
OSVCLSA-2026-1787137111 No score
TuxCare security update for io.undertow:undertow-core (6 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 2.2.24.Final-tuxcare.1.
- Record
CLSA-2026-1787137111- Updated
- 2026-11-02
OSVCLSA-2026-1789372923 No score
TuxCare security update for io.undertow:undertow-core (1 CVE)
TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 1.4.27.Final-tuxcare.1.
- Record
CLSA-2026-1789372923- Updated
- 2026-11-02
OSVCLSA-2026-1789457514 No score
TuxCare security update for io.undertow:undertow-core (1 CVE)
TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 2.0.26.Final-tuxcare.1.
- Record
CLSA-2026-1789457514- Updated
- 2026-11-02
OSV No score
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized data access or modification. The main threat from this flaw impacts data confidentiality and integrity.
- Record
CVE-2023-4639- Updated
- 2026-11-02
Affected products
- red hat migration toolkit for applications 6
- red hat migration toolkit for runtimes 1 on rhel 8
- red hat build of apache camel for spring boot 3
- red hat build of apicurio registry
- red hat build of quarkus
- red hat data grid 8
- red hat decision manager 7
- red hat fuse 7
- red hat integration camel k
- red hat integration camel quarkus
- red hat integration change data capture
- red hat jboss data grid 7
Show 12 moreShow less
- red hat jboss enterprise application platform 6
- red hat jboss enterprise application platform 7
- red hat jboss enterprise application platform 7.4 for rhel 8
- red hat jboss enterprise application platform 7.4 for rhel 9
- red hat jboss enterprise application platform 7.4 on rhel 7
- red hat jboss enterprise application platform 8
- red hat jboss enterprise application platform 8.0 for rhel 8
- red hat jboss enterprise application platform 8.0 for rhel 9
- red hat jboss fuse 6
- red hat jboss fuse service works 6
- red hat process automation 7
- red hat single sign-on 7
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.11.Final | 2.3.11.Final |
io.undertow:undertow-coreMaven |
before 2.2.30.Final | 2.2.30.Final |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.10.Final up to 2.3.10.Final-tuxcare.1 | 2.3.10.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.0.Final up to 2.3.0.Final-tuxcare.1 | 2.3.0.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 6 CVEs |
2.2.24.Final up to 2.2.24.Final-tuxcare.1 | 2.2.24.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven |
1.4.27.Final up to 1.4.27.Final-tuxcare.1 | 1.4.27.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven |
2.0.26.Final up to 2.0.26.Final-tuxcare.1 | 2.0.26.Final-tuxcare.1 |
undertowDebian:14 |
before 2.3.18-1, plus listed versions 1.3.11-11.3.16-11.3.19-11.3.21-11.3.23-1 Show 45 moreShow less1.3.4-11.3.5-11.3.7-11.4.0-11.4.1-11.4.18-11.4.20-11.4.21-11.4.21-21.4.22-11.4.23-11.4.23-21.4.23-31.4.25-11.4.25-21.4.3-11.4.4-11.4.6-11.4.7-11.4.8-12.0.23-12.0.25-12.0.26-12.0.27-12.0.28-12.0.29-12.0.30-12.1.0-12.1.1-12.1.3-12.2.0-12.2.10-12.2.12-12.2.13-12.2.14-12.2.16-12.2.17-12.2.18-12.2.19-12.2.2-12.2.20-12.2.21-12.2.3-12.2.4-12.2.5-1 |
2.3.18-1 |
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.11.Final, plus listed versions 2.3.0.Alpha22.3.0.Beta12.3.0.Final2.3.1.Final2.3.10.Final Show 8 moreShow less2.3.2.Final2.3.3.Final2.3.4.Final2.3.5.Final2.3.6.Final2.3.7.Final2.3.8.Final2.3.9.Final |
2.3.11.Final |
io.undertow:undertow-coreMaven |
before 2.2.30.Final, plus listed versions 1.0.0.Alpha11.0.0.Alpha101.0.0.Alpha111.0.0.Alpha121.0.0.Alpha13 Show 45 moreShow less1.0.0.Alpha141.0.0.Alpha151.0.0.Alpha161.0.0.Alpha171.0.0.Alpha181.0.0.Alpha191.0.0.Alpha21.0.0.Alpha201.0.0.Alpha211.0.0.Alpha221.0.0.Alpha31.0.0.Alpha41.0.0.Alpha51.0.0.Alpha61.0.0.Alpha71.0.0.Alpha81.0.0.Alpha91.0.0.Beta11.0.0.Beta101.0.0.Beta111.0.0.Beta121.0.0.Beta131.0.0.Beta141.0.0.Beta151.0.0.Beta161.0.0.Beta171.0.0.Beta181.0.0.Beta191.0.0.Beta21.0.0.Beta201.0.0.Beta211.0.0.Beta221.0.0.Beta231.0.0.Beta241.0.0.Beta251.0.0.Beta261.0.0.Beta271.0.0.Beta281.0.0.Beta291.0.0.Beta31.0.0.Beta301.0.0.Beta311.0.0.Beta321.0.0.Beta331.0.0.Beta4 |
2.2.30.Final |
Show 210 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.2.30-1.SP1_redhat_00001.1.el7eap | 0:2.2.30-1.SP1_redhat_00001.1.el7eap |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el7eap | 0:2.16.0-18.redhat_00052.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el7eap | 0:3.4.10-2.redhat_00001.1.el7eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el7eap | 0:3.4.10-2.redhat_00001.1.el7eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el7eap | 0:3.4.10-2.redhat_00001.1.el7eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el7eap | 0:3.4.10-2.redhat_00001.1.el7eap |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap | 0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap |
eap7-elytron-webRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el7eap | 0:1.9.4-1.Final_redhat_00001.1.el7eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.3.21-1.Final_redhat_00001.1.el7eap | 0:3.3.21-1.Final_redhat_00001.1.el7eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el7eap | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el7eap | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el7eap | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el7eap | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el7eap | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el7eap | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el7eap | 0:1.1.2-1.redhat_00001.1.el7eap |
eap7-jberetRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el7eap | 0:1.3.9-3.SP3_redhat_00001.1.el7eap |
eap7-jberet-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el7eap | 0:1.3.9-3.SP3_redhat_00001.1.el7eap |
eap7-jboss-annotations-api_1.3_specRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:2.0.1-3.Final_redhat_00001.1.el7eap | 0:2.0.1-3.Final_redhat_00001.1.el7eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el7eap | 0:1.1.2-1.redhat_00001.1.el7eap |
eap7-jboss-cert-helper-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el7eap | 0:1.1.2-1.redhat_00001.1.el7eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.0.27-4.SP2_redhat_00001.1.el7eap | 0:5.0.27-4.SP2_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el7eap | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el7eap | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el7eap | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:3.8.12-1.SP2_redhat_00001.1.el7eap | 0:3.8.12-1.SP2_redhat_00001.1.el7eap |
eap7-jgroups-kubernetesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el7eap | 0:1.0.17-1.Final_redhat_00001.1.el7eap |
eap7-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-backward-codecsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-facetRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-miscRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-queriesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-queryparserRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-lucene-solrRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el7eap | 0:5.5.5-6.redhat_2.1.el7eap |
eap7-undertow-serverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el7eap | 0:1.9.4-1.Final_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el7eap | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el7eap | 0:1.15.22-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el7eap | 0:1.15.22-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el7eap | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el7eap | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el7eap | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el7eap | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.2.30-1.SP1_redhat_00001.1.el8eap | 0:2.2.30-1.SP1_redhat_00001.1.el8eap |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el8eap | 0:2.16.0-18.redhat_00052.1.el8eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el8eap | 0:3.4.10-2.redhat_00001.1.el8eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el8eap | 0:3.4.10-2.redhat_00001.1.el8eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el8eap | 0:3.4.10-2.redhat_00001.1.el8eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el8eap | 0:3.4.10-2.redhat_00001.1.el8eap |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap | 0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap |
eap7-elytron-webRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el8eap | 0:1.9.4-1.Final_redhat_00001.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.3.21-1.Final_redhat_00001.1.el8eap | 0:3.3.21-1.Final_redhat_00001.1.el8eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el8eap | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el8eap | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el8eap | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el8eap | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el8eap | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el8eap | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el8eap | 0:1.1.2-1.redhat_00001.1.el8eap |
eap7-jberetRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el8eap | 0:1.3.9-3.SP3_redhat_00001.1.el8eap |
eap7-jberet-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el8eap | 0:1.3.9-3.SP3_redhat_00001.1.el8eap |
eap7-jboss-annotations-api_1.3_specRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:2.0.1-3.Final_redhat_00001.1.el8eap | 0:2.0.1-3.Final_redhat_00001.1.el8eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el8eap | 0:1.1.2-1.redhat_00001.1.el8eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.0.27-4.SP2_redhat_00001.1.el8eap | 0:5.0.27-4.SP2_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el8eap | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el8eap | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el8eap | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:3.8.12-1.SP2_redhat_00001.1.el8eap | 0:3.8.12-1.SP2_redhat_00001.1.el8eap |
eap7-jgroups-kubernetesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el8eap | 0:1.0.17-1.Final_redhat_00001.1.el8eap |
eap7-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-backward-codecsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-facetRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-groupingRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-miscRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-queriesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-queryparserRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-lucene-solrRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el8eap | 0:5.5.5-6.redhat_2.1.el8eap |
eap7-undertow-serverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el8eap | 0:1.9.4-1.Final_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el8eap | 0:1.15.22-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el8eap | 0:1.15.22-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el8eap | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.2.30-1.SP1_redhat_00001.1.el9eap | 0:2.2.30-1.SP1_redhat_00001.1.el9eap |
eap7-activemq-artemisRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-core-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-dtoRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-hornetq-protocolRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-hqclient-protocolRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-jdbc-storeRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-jms-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-jms-serverRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-journalRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-raRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-selectorRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-serverRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-service-extensionsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-activemq-artemis-toolsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.16.0-18.redhat_00052.1.el9eap | 0:2.16.0-18.redhat_00052.1.el9eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el9eap | 0:3.4.10-2.redhat_00001.1.el9eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el9eap | 0:3.4.10-2.redhat_00001.1.el9eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el9eap | 0:3.4.10-2.redhat_00001.1.el9eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.4.10-2.redhat_00001.1.el9eap | 0:3.4.10-2.redhat_00001.1.el9eap |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap | 0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap |
eap7-elytron-webRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el9eap | 0:1.9.4-1.Final_redhat_00001.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.3.21-1.Final_redhat_00001.1.el9eap | 0:3.3.21-1.Final_redhat_00001.1.el9eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el9eap | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el9eap | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.3.36-1.Final_redhat_00001.1.el9eap | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:11.0.18-2.Final_redhat_00001.1.el9eap | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el9eap | 0:1.1.2-1.redhat_00001.1.el9eap |
eap7-jberetRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el9eap | 0:1.3.9-3.SP3_redhat_00001.1.el9eap |
eap7-jberet-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.3.9-3.SP3_redhat_00001.1.el9eap | 0:1.3.9-3.SP3_redhat_00001.1.el9eap |
eap7-jboss-annotations-api_1.3_specRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:2.0.1-3.Final_redhat_00001.1.el9eap | 0:2.0.1-3.Final_redhat_00001.1.el9eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.1.2-1.redhat_00001.1.el9eap | 0:1.1.2-1.redhat_00001.1.el9eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.0.27-4.SP2_redhat_00001.1.el9eap | 0:5.0.27-4.SP2_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el9eap | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el9eap | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.10.0-35.Final_redhat_00034.1.el9eap | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:3.8.12-1.SP2_redhat_00001.1.el9eap | 0:3.8.12-1.SP2_redhat_00001.1.el9eap |
eap7-jgroups-kubernetesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el9eap | 0:1.0.17-1.Final_redhat_00001.1.el9eap |
eap7-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-backward-codecsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-facetRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-miscRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-queriesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-queryparserRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-lucene-solrRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:5.5.5-6.redhat_2.1.el9eap | 0:5.5.5-6.redhat_2.1.el9eap |
eap7-undertow-serverRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.9.4-1.Final_redhat_00001.1.el9eap | 0:1.9.4-1.Final_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el9eap | 0:1.15.22-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:1.15.22-1.Final_redhat_00001.1.el9eap | 0:1.15.22-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 5 CVEs |
before 0:7.4.16-4.GA_redhat_00002.1.el9eap | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
eap8-undertowRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 3 CVEs |
before 0:2.3.11-1.SP1_redhat_00001.1.el8eap | 0:2.3.11-1.SP1_redhat_00001.1.el8eap |
eap8-undertowRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 3 CVEs |
before 0:2.3.11-1.SP1_redhat_00001.1.el9eap | 0:2.3.11-1.SP1_redhat_00001.1.el9eap |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
undertowUbuntu:25.10 |
All versions, plus listed versions 2.3.18-12.3.18-2 |
None known |
undertowUbuntu:26.10 |
All versions, plus listed versions 2.3.20-1ubuntu1 |
None known |
undertowUbuntu:26.04:LTS |
All versions, plus listed versions 2.3.18-22.3.20-12.3.20-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4639 is a high vulnerability (CVSS 7.4) in Red Hat Migration Toolkit For Applications 6, published September 27, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in io.undertow:undertow-core 2.3.11.Final.
References
access.redhat.com/errata/RHSA-2024:1674
Show 52 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2166022
security.netapp.com/advisory/ntap-20250207-0001
nvd.nist.gov/vuln/detail/CVE-2023-4639
github.com/undertow-io/undertow/commit/1f93a979d2ac264798e5779b5b7172dfafe0066f
security-tracker.debian.org/tracker/CVE-2023-4639
issues.redhat.com/browse/JBEAP-19969
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1674.json
cve.org/CVERecord?id=CVE-2023-1973
terrapin-attack.com
ubuntu.com/security/CVE-2023-4639
This page doesn't list everything
Left out here: 251 versions. The JSON record has them.