Every CVE Search/ Get API key

CVE-2026-27727

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

8.9 HighFix available

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.98%Up 0.9 points since Feb 26, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.9

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Record
CVE-2026-27727
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-74, CWE-502
Updated
2026-11-02
EUVDEUVD-2026-8683 8.9

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Record
EUVD-2026-8683
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m2cm-222f-qw44 8.9

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

Impact

mchange-commons-java includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code.

Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened.

Patches

Mirroring the JDK patch, mchange-commons-java's JNDI functionality is now gated by configuration parameters that default to restrictive values. Those parameters are documented here.

Workarounds

No. Users should upgrade to mchange-commons-java >= 0.4.0. Earlier versions should be avoided on application CLASSPATHs.

References

c3p0, you little rascal — Hans-Martin Münch c3p0 documentation, security note c3p0 documentation, configuring security

Record
GHSA-m2cm-222f-qw44
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-74, CWE-502
Updated
2026-11-02
NVD 8.9

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Record
CVE-2026-27727
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness
CWE-74, CWE-502
Updated
2026-11-02
OSV 8.9

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Record
CVE-2026-27727
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-74
Updated
2026-11-02
OSVGHSA-m2cm-222f-qw44 8.9

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

Impact

mchange-commons-java includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code.

Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened.

Patches

Mirroring the JDK patch, mchange-commons-java's JNDI functionality is now gated by configuration parameters that default to restrictive values. Those parameters are documented here.

Workarounds

No. Users should upgrade to mchange-commons-java >= 0.4.0. Earlier versions should be avoided on application CLASSPATHs.

References

c3p0, you little rascal — Hans-Martin Münch c3p0 documentation, security note c3p0 documentation, configuring security

Record
GHSA-m2cm-222f-qw44
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-502, CWE-74
Updated
2026-11-02
Show 17 moreShow less
OSVOESA-2026-1690 9.8

mchange-commons security update

General tool, part of c3p0.

Security Fix(es):

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.(CVE-2026-27727)

Record
OESA-2026-1690
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:14873 8.3

Red Hat Security Advisory: Satellite 6.17.8 Async Update

Record
RHSA-2026:14873
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:14874 8.3

Red Hat Security Advisory: Satellite 6.16.8 Async Update

Record
RHSA-2026:14874
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:18054 9.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update

Record
RHSA-2026:18054
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:18055 9.1

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.6 security update

Record
RHSA-2026:18055
CVSS 3.1
9.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2026:34365 8.8

Red Hat Security Advisory: Satellite 6.19.2 Async Update

Record
RHSA-2026:34365
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:73644 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.19 Update

Record
RHSA-2026:73644
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:73976 8.3

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.16 security update

Record
RHSA-2026:73976
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-27727 8.9

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote factoryClassLocation values, by which code can be downloaded and invoked within a running application. If an attacker can provoke an application to read a maliciously crafted jaxax.naming.Reference or serialized object, they can provoke the download and execution of malicious code. Implementations of this functionality within the JDK were disabled by default behind a System property that defaults to false, com.sun.jndi.ldap.object.trustURLCodebase. However, since mchange-commons-java includes an independent implementation of JNDI derefencing, libraries (such as c3p0) that resolve references via that implementation could be provoked to download and execute malicious code even after the JDK was hardened. Mirroring the JDK patch, mchange-commons-java's JNDI functionality is gated by configuration parameters that default to restrictive values starting in version 0.4.0. No known workarounds are available. Versions prior to 0.4.0 should be avoided on application CLASSPATHs.

Record
UBUNTU-CVE-2026-27727
CVSS 4.0
8.9 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1783991044 No score

TuxCare security update for com.mchange:mchange-commons-java (1 CVE)

TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.20-tuxcare.1.

Record
CLSA-2026-1783991044
Updated
2026-11-02
OSVCLSA-2026-1784077469 No score

TuxCare security update for com.mchange:mchange-commons-java (1 CVE)

TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.15-tuxcare.1.

Record
CLSA-2026-1784077469
Updated
2026-11-02
OSVCLSA-2026-1784077513 No score

TuxCare security update for com.mchange:mchange-commons-java (1 CVE)

TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.19-tuxcare.1.

Record
CLSA-2026-1784077513
Updated
2026-11-02
OSVopenSUSE-SU-2026:10279-1 No score

c3p0-0.12.0-1.1 on GA media

These are all security issues fixed in the c3p0-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10279-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10281-1 No score

mchange-commons-0.4.0-1.1 on GA media

These are all security issues fixed in the mchange-commons-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10281-1
Updated
2026-11-02
OSVSUSE-SU-2026:0855-1 No score

Security update for c3p0 and mchange-commons

This update for c3p0 and mchange-commons fixes the following issues:

c3p0:

  • Security issues fixed:

    • CVE-2026-27830: Fixed unsafe object deserialization (bsc#1258942)

  • Fix the null pointer exception in the userOverridesAsString method (bsc#1259313).

mchange-commons:

  • Security issues fixed:

    • CVE-2026-27727: Disabled remote ClassLoading when dereferencing javax.naming.Reference instances (bsc#1258913)
Record
SUSE-SU-2026:0855-1
Updated
2026-11-02
OSVSUSE-SU-2026:1035-1 No score

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes

Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes:

This is a codestream only update

Record
SUSE-SU-2026:1035-1
Updated
2026-11-02
OSVUSN-8642-1 No score

c3p0 vulnerabilities

It was discovered that c3p0 was vulnerable to remote code execution via maliciously crafted serialized objects and JNDI references. An attacker could use this to execute arbitrary code, bypass security restrictions, or cause a denial of service.

Record
USN-8642-1
Updated
2026-11-02

Affected products

Show 8 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
com.mchange:mchange-commons-java
Maven
 before 0.4.0
0.4.0
com.mchange:mchange-commons-java
TuxCare:Maven
 0.2.20 up to 0.2.20-tuxcare.1
0.2.20-tuxcare.1
com.mchange:mchange-commons-java
TuxCare:Maven
 0.2.15 up to 0.2.15-tuxcare.1
0.2.15-tuxcare.1
com.mchange:mchange-commons-java
TuxCare:Maven
 0.2.19 up to 0.2.19-tuxcare.1
0.2.19-tuxcare.1
com.mchange:mchange-commons-java
Maven
 before 0.4.0, plus listed versions
0.2.1-RELEASE0.2.100.2.110.2.120.2.13
Show 26 moreShow less
0.2.140.2.150.2.160.2.170.2.180.2.190.2.20.2.200.2.30.2.3.10.2.3.20.2.3.30.2.3.40.2.40.2.50.2.60.2.6.10.2.6.20.2.6.30.2.6.50.2.70.2.80.2.90.3.00.3.10.3.2
0.4.0
mchange-commons
openEuler:24.03-LTS
 before 0.2.11-12.oe2403sp3
0.2.11-12.oe2403sp3
mchange-commons
openEuler:24.03-LTS-SP1
 before 0.2.11-12.oe2403sp1
0.2.11-12.oe2403sp1
mchange-commons
openEuler:24.03-LTS-SP2
 before 0.2.11-12.oe2403sp2
0.2.11-12.oe2403sp2
mchange-commons
openEuler:24.03-LTS-SP3
 before 0.2.11-12.oe2403sp3
0.2.11-12.oe2403sp3
mchange-commons
openEuler:20.03-LTS-SP4
 before 0.2.11-11.oe2003sp4
0.2.11-11.oe2003sp4
Show 290 moreShow less
Affected packages
PackageAffectedFixed
mchange-commons
openEuler:22.03-LTS-SP4
 before 0.2.11-12.oe2203sp4
0.2.11-12.oe2203sp4
python-markdown
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python3.11-markdown
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python-markdown
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python3.11-markdown
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python-pillow
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow-debugsource
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow-debuginfo
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow-debugsource
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow-debuginfo
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:25.1.0-0.3.el9pc
0:25.1.0-0.3.el9pc
python3.11-pyOpenSSL
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:25.1.0-0.3.el9pc
0:25.1.0-0.3.el9pc
python-pyOpenSSL
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:25.1.0-0.3.el9pc
0:25.1.0-0.3.el9pc
python3.11-pyOpenSSL
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:25.1.0-0.3.el9pc
0:25.1.0-0.3.el9pc
candlepin
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el9sat
0:4.4.25-1.el9sat
candlepin-selinux
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el9sat
0:4.4.25-1.el9sat
rubygem-activesupport
Red Hat:satellite_capsule:6.17::el9
From an advisory covering 5 CVEs
 before 0:7.0.8.7-2.el9sat
0:7.0.8.7-2.el9sat
rubygem-activesupport
Red Hat:satellite:6.17::el9
From an advisory covering 5 CVEs
 before 0:7.0.8.7-2.el9sat
0:7.0.8.7-2.el9sat
python-markdown
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el8pc
0:3.8.2-1.el8pc
python3.11-markdown
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el8pc
0:3.8.2-1.el8pc
python-markdown
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el8pc
0:3.8.2-1.el8pc
python3.11-markdown
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el8pc
0:3.8.2-1.el8pc
python-markdown
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python3.11-markdown
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python-markdown
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python3.11-markdown
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:3.8.2-1.el9pc
0:3.8.2-1.el9pc
python-pillow
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python-pillow-debugsource
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python3.11-pillow
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python3.11-pillow-debuginfo
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python-pillow
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python-pillow-debugsource
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python3.11-pillow
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python3.11-pillow-debuginfo
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el8pc
0:12.1.1-1.el8pc
python-pillow
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow-debugsource
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow-debuginfo
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pillow-debugsource
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python3.11-pillow-debuginfo
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:12.1.1-1.el9pc
0:12.1.1-1.el9pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el8pc
0:24.1.0-2.el8pc
python3.11-pyOpenSSL
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el8pc
0:24.1.0-2.el8pc
python-pyOpenSSL
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el8pc
0:24.1.0-2.el8pc
python3.11-pyOpenSSL
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el8pc
0:24.1.0-2.el8pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el9pc
0:24.1.0-2.el9pc
python3.11-pyOpenSSL
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el9pc
0:24.1.0-2.el9pc
python-pyOpenSSL
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el9pc
0:24.1.0-2.el9pc
python3.11-pyOpenSSL
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:24.1.0-2.el9pc
0:24.1.0-2.el9pc
candlepin
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el8sat
0:4.4.25-1.el8sat
candlepin-selinux
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el8sat
0:4.4.25-1.el8sat
candlepin
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el9sat
0:4.4.25-1.el9sat
candlepin-selinux
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:4.4.25-1.el9sat
0:4.4.25-1.el9sat
rubygem-activesupport
Red Hat:satellite_capsule:6.16::el8
From an advisory covering 5 CVEs
 before 0:6.1.7.8-2.el8sat
0:6.1.7.8-2.el8sat
rubygem-activesupport
Red Hat:satellite:6.16::el8
From an advisory covering 5 CVEs
 before 0:6.1.7.8-2.el8sat
0:6.1.7.8-2.el8sat
rubygem-activesupport
Red Hat:satellite_capsule:6.16::el9
From an advisory covering 5 CVEs
 before 0:6.1.7.8-2.el9sat
0:6.1.7.8-2.el9sat
rubygem-activesupport
Red Hat:satellite:6.16::el9
From an advisory covering 5 CVEs
 before 0:6.1.7.8-2.el9sat
0:6.1.7.8-2.el9sat
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el8eap
0:1.84.0-1.redhat_00001.1.el8eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el8eap
0:8.1.6-5.GA_redhat_00007.1.el8eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el8eap
0:8.1.6-5.GA_redhat_00007.1.el8eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el8eap
0:8.1.6-5.GA_redhat_00007.1.el8eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el8eap
0:8.1.6-5.GA_redhat_00007.1.el8eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el8eap
0:2.40.0-6.redhat_00012.1.el8eap
eap8-angus
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.0.5-1.redhat_00001.1.el8eap
0:2.0.5-1.redhat_00001.1.el8eap
eap8-angus-activation
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.0.3-1.redhat_00001.1.el8eap
0:2.0.3-1.redhat_00001.1.el8eap
eap8-angus-mail
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.0.5-1.redhat_00001.1.el8eap
0:2.0.5-1.redhat_00001.1.el8eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:801.6.0-1.GA_redhat_00001.1.el8eap
0:801.6.0-1.GA_redhat_00001.1.el8eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:801.6.0-1.GA_redhat_00001.1.el8eap
0:801.6.0-1.GA_redhat_00001.1.el8eap
eap8-guava
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:33.0.0-3.jre_redhat_00004.1.el8eap
0:33.0.0-3.jre_redhat_00004.1.el8eap
eap8-guava-failureaccess
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.0.3-1.redhat_00001.1.el8eap
0:1.0.3-1.redhat_00001.1.el8eap
eap8-guava-libraries
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:33.0.0-3.jre_redhat_00004.1.el8eap
0:33.0.0-3.jre_redhat_00004.1.el8eap
eap8-hal-console
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:3.7.19-1.Final_redhat_00001.1.el8eap
0:3.7.19-1.Final_redhat_00001.1.el8eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el8eap
0:6.6.48-1.Final_redhat_00001.1.el8eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el8eap
0:6.6.48-1.Final_redhat_00001.1.el8eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el8eap
0:6.6.48-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-backend-elasticsearch
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-backend-lucene
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-mapper-orm
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-mapper-pojo-base
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-hibernate-search-util-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el8eap
0:7.2.6-1.Final_redhat_00001.1.el8eap
eap8-jakarta-activation
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.redhat_00001.1.el8eap
0:2.1.4-1.redhat_00001.1.el8eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:3.6.2-1.Final_redhat_00001.1.el8eap
0:3.6.2-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata-appclient
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata-ear
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata-ejb
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jboss-metadata-web
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el8eap
0:16.1.0-1.Final_redhat_00001.1.el8eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.0.6-1.redhat_00001.1.el8eap
0:4.0.6-1.redhat_00001.1.el8eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.0.6-1.redhat_00001.1.el8eap
0:4.0.6-1.redhat_00001.1.el8eap
eap8-netty
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-buffer
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-codec
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-dns
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-http
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-codec-socks
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-handler
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-resolver
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-transport
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el8eap
0:4.1.132-1.Final_redhat_00001.1.el8eap
eap8-plexus-utils
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:3.6.1-1.redhat_00001.1.el8eap
0:3.6.1-1.redhat_00001.1.el8eap
eap8-reactivex-rxjava
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:3.1.12-1.redhat_00001.1.el8eap
0:3.1.12-1.redhat_00001.1.el8eap
eap8-reactivex-rxjava2
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.2.21-5.redhat_00003.1.el8eap
0:2.2.21-5.redhat_00003.1.el8eap
eap8-wildfly-client-config
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:1.0.1-4.Final_redhat_00002.1.el8eap
0:1.0.1-4.Final_redhat_00002.1.el8eap
eap8-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el8eap
0:2.1.4-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el8eap
0:2.1.4-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el8eap
0:2.1.4-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el8eap
0:2.1.4-1.Final_redhat_00001.1.el8eap
eap8-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el8eap
0:2.1.4-1.Final_redhat_00001.1.el8eap
eap8-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:8.1.1-10.GA_redhat_00017.1.el8eap
0:8.1.1-10.GA_redhat_00017.1.el8eap
eap8-wildfly-openssl
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el8eap
0:2.3.0-1.Final_redhat_00001.1.el8eap
eap8-wildfly-openssl-el8-x86_64
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final.redhat.00001.1.el8eap
0:2.3.0-1.Final.redhat.00001.1.el8eap
eap8-wildfly-openssl-el8-x86_64-debuginfo
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final.redhat.00001.1.el8eap
0:2.3.0-1.Final.redhat.00001.1.el8eap
eap8-wildfly-openssl-java
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el8eap
0:2.3.0-1.Final_redhat_00001.1.el8eap
eap8-yasson
Red Hat:jboss_enterprise_application_platform:8.1::el8
From an advisory covering 14 CVEs
 before 0:3.0.4-5.redhat_00007.1.el8eap
0:3.0.4-5.redhat_00007.1.el8eap
eap8-bouncycastle
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-jmail
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pg
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-bouncycastle-util
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.84.0-1.redhat_00001.1.el9eap
0:1.84.0-1.redhat_00001.1.el9eap
eap8-wildfly
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el9eap
0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk17
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el9eap
0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-java-jdk21
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el9eap
0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-wildfly-modules
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:8.1.6-5.GA_redhat_00007.1.el9eap
0:8.1.6-5.GA_redhat_00007.1.el9eap
eap8-activemq-artemis
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-cli
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-commons
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-core-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-dto
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-hornetq-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-hqclient-protocol
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-ra
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-server
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jakarta-service-extensions
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-jdbc-store
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-journal
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-selector
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-activemq-artemis-server
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.40.0-6.redhat_00012.1.el9eap
0:2.40.0-6.redhat_00012.1.el9eap
eap8-angus
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.0.5-1.redhat_00001.1.el9eap
0:2.0.5-1.redhat_00001.1.el9eap
eap8-angus-activation
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.0.3-1.redhat_00001.1.el9eap
0:2.0.3-1.redhat_00001.1.el9eap
eap8-angus-mail
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.0.5-1.redhat_00001.1.el9eap
0:2.0.5-1.redhat_00001.1.el9eap
eap8-eap-product-conf-parent
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:801.6.0-1.GA_redhat_00001.1.el9eap
0:801.6.0-1.GA_redhat_00001.1.el9eap
eap8-eap-product-conf-wildfly-ee-feature-pack
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:801.6.0-1.GA_redhat_00001.1.el9eap
0:801.6.0-1.GA_redhat_00001.1.el9eap
eap8-guava
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:33.0.0-3.jre_redhat_00004.1.el9eap
0:33.0.0-3.jre_redhat_00004.1.el9eap
eap8-guava-failureaccess
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.0.3-1.redhat_00001.1.el9eap
0:1.0.3-1.redhat_00001.1.el9eap
eap8-guava-libraries
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:33.0.0-3.jre_redhat_00004.1.el9eap
0:33.0.0-3.jre_redhat_00004.1.el9eap
eap8-hal-console
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:3.7.19-1.Final_redhat_00001.1.el9eap
0:3.7.19-1.Final_redhat_00001.1.el9eap
eap8-hibernate
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el9eap
0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-core
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el9eap
0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-envers
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:6.6.48-1.Final_redhat_00001.1.el9eap
0:6.6.48-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-backend-elasticsearch
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-backend-lucene
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-mapper-orm
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-mapper-pojo-base
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-hibernate-search-util-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:7.2.6-1.Final_redhat_00001.1.el9eap
0:7.2.6-1.Final_redhat_00001.1.el9eap
eap8-jakarta-activation
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.redhat_00001.1.el9eap
0:2.1.4-1.redhat_00001.1.el9eap
eap8-jboss-logging
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:3.6.2-1.Final_redhat_00001.1.el9eap
0:3.6.2-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-appclient
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-ear
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-ejb
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jboss-metadata-web
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:16.1.0-1.Final_redhat_00001.1.el9eap
0:16.1.0-1.Final_redhat_00001.1.el9eap
eap8-jctools
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.0.6-1.redhat_00001.1.el9eap
0:4.0.6-1.redhat_00001.1.el9eap
eap8-jctools-core
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.0.6-1.redhat_00001.1.el9eap
0:4.0.6-1.redhat_00001.1.el9eap
eap8-netty
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-buffer
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-dns
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-http
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-codec-socks
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-handler
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-handler-proxy
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-resolver
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-resolver-dns
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-classes-epoll
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-epoll
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-epoll-debuginfo
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-netty-transport-native-unix-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:4.1.132-1.Final_redhat_00001.1.el9eap
0:4.1.132-1.Final_redhat_00001.1.el9eap
eap8-plexus-utils
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:3.6.1-1.redhat_00001.1.el9eap
0:3.6.1-1.redhat_00001.1.el9eap
eap8-reactivex-rxjava
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:3.1.12-1.redhat_00001.1.el9eap
0:3.1.12-1.redhat_00001.1.el9eap
eap8-reactivex-rxjava2
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.2.21-5.redhat_00003.1.el9eap
0:2.2.21-5.redhat_00003.1.el9eap
eap8-wildfly-client-config
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:1.0.1-4.Final_redhat_00002.1.el9eap
0:1.0.1-4.Final_redhat_00002.1.el9eap
eap8-wildfly-http-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el9eap
0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-client-common
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el9eap
0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-ejb-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el9eap
0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-naming-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el9eap
0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-http-transaction-client
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.1.4-1.Final_redhat_00001.1.el9eap
0:2.1.4-1.Final_redhat_00001.1.el9eap
eap8-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:8.1.1-10.GA_redhat_00017.1.el9eap
0:8.1.1-10.GA_redhat_00017.1.el9eap
eap8-wildfly-openssl
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el9eap
0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-el9-x86_64
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el9eap
0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-el9-x86_64-debuginfo
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el9eap
0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-wildfly-openssl-java
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:2.3.0-1.Final_redhat_00001.1.el9eap
0:2.3.0-1.Final_redhat_00001.1.el9eap
eap8-yasson
Red Hat:jboss_enterprise_application_platform:8.1::el9
From an advisory covering 14 CVEs
 before 0:3.0.4-5.redhat_00007.1.el9eap
0:3.0.4-5.redhat_00007.1.el9eap
foreman
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-debug
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-pcp
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman
Red Hat:satellite_utils:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-cli
Red Hat:satellite_utils:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-cli
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-debug
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-ec2
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-journald
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-libvirt
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-openstack
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-pcp
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-postgresql
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-redis
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-service
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-telemetry
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
foreman-vmware
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:3.18.0.7-1.el9sat
0:3.18.0.7-1.el9sat
yggdrasil-worker-forwarder
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:0.0.3-5.el9sat
0:0.0.3-5.el9sat
candlepin
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:4.7.5-1.el9sat
0:4.7.5-1.el9sat
candlepin-selinux
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:4.7.5-1.el9sat
0:4.7.5-1.el9sat
python3.12-pillow
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pillow-debuginfo
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pillow-debugsource
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pillow
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pillow-debuginfo
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pillow-debugsource
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:12.2.0-1.el9pc
0:12.2.0-1.el9pc
python3.12-pyjwt+crypto
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:2.13.0-1.el9pc
0:2.13.0-1.el9pc
python3.12-pyjwt
Red Hat:satellite_capsule:6.19::el9
From an advisory covering 13 CVEs
 before 0:2.13.0-1.el9pc
0:2.13.0-1.el9pc
python3.12-pyjwt+crypto
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:2.13.0-1.el9pc
0:2.13.0-1.el9pc
python3.12-pyjwt
Red Hat:satellite:6.19::el9
From an advisory covering 13 CVEs
 before 0:2.13.0-1.el9pc
0:2.13.0-1.el9pc
eap7-hibernate
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:5.3.39-1.Final_redhat_00001.1.el7eap
0:5.3.39-1.Final_redhat_00001.1.el7eap
eap7-hibernate-core
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:5.3.39-1.Final_redhat_00001.1.el7eap
0:5.3.39-1.Final_redhat_00001.1.el7eap
eap7-hibernate-entitymanager
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:5.3.39-1.Final_redhat_00001.1.el7eap
0:5.3.39-1.Final_redhat_00001.1.el7eap
eap7-hibernate-envers
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:5.3.39-1.Final_redhat_00001.1.el7eap
0:5.3.39-1.Final_redhat_00001.1.el7eap
eap7-hibernate-java8
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:5.3.39-1.Final_redhat_00001.1.el7eap
0:5.3.39-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:1.7.2-24.Final_redhat_00026.1.el7eap
0:1.7.2-24.Final_redhat_00026.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:1.7.2-24.Final_redhat_00026.1.el7eap
0:1.7.2-24.Final_redhat_00026.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:1.7.2-24.Final_redhat_00026.1.el7eap
0:1.7.2-24.Final_redhat_00026.1.el7eap
eap7-jboss-server-migration-eap6.4
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:1.7.2-24.Final_redhat_00026.1.el7eap
0:1.7.2-24.Final_redhat_00026.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.3
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 7 CVEs
 before 0:1.7.2-24.Final_redhat_00026.1.el7eap
0:1.7.2-24.Final_redhat_00026.1.el7eap
c3p0
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 0.9.5.5-150400.3.5.1
0.9.5.5-150400.3.5.1
mchange-commons
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 0.2.20-150400.3.3.1
0.2.20-150400.3.3.1
c3p0
Ubuntu:Pro:16.04:LTS
 before 0.9.1.2-9+deb8u1ubuntu0.16.04.1~esm2, plus listed versions
0.9.1.2-90.9.1.2-9+deb8u1build0.16.04.10.9.1.2-9+deb8u1ubuntu0.16.04.1~esm1
0.9.1.2-9+deb8u1ubuntu0.16.04.1~esm2
c3p0
Ubuntu:Pro:18.04:LTS
 before 0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1, plus listed versions
0.9.1.2-90.9.1.2-9+deb8u1build0.18.04.10.9.1.2-9+deb8u1ubuntu0.18.04.1
0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1
c3p0
Ubuntu:Pro:20.04:LTS
 before 0.9.1.2-10ubuntu0.20.04.1+esm1, plus listed versions
0.9.1.2-100.9.1.2-10ubuntu0.20.04.1
0.9.1.2-10ubuntu0.20.04.1+esm1
c3p0
Ubuntu:Pro:22.04:LTS
 before 0.9.1.2-10ubuntu1+esm1, plus listed versions
0.9.1.2-100.9.1.2-10ubuntu1
0.9.1.2-10ubuntu1+esm1
c3p0
Ubuntu:Pro:24.04:LTS
 before 0.9.1.2-10ubuntu2+esm1, plus listed versions
0.9.1.2-10ubuntu10.9.1.2-10ubuntu2
0.9.1.2-10ubuntu2+esm1
c3p0
Ubuntu:25.10
 All versions, plus listed versions
0.9.1.2-10ubuntu2
 None known
c3p0
Ubuntu:26.10
 All versions, plus listed versions
0.9.1.2-11
 None known
c3p0
Ubuntu:Pro:26.04:LTS
 before 0.9.1.2-11ubuntu0.1~esm1, plus listed versions
0.9.1.2-10ubuntu20.9.1.2-11
0.9.1.2-11ubuntu0.1~esm1
c3p0
Ubuntu:Pro:18.04:LTS
From an advisory covering 4 CVEs
 before 0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1, plus listed versions
0.9.1.2-90.9.1.2-9+deb8u1build0.18.04.10.9.1.2-9+deb8u1ubuntu0.18.04.1
0.9.1.2-9+deb8u1ubuntu0.18.04.1+esm1
c3p0
Ubuntu:Pro:20.04:LTS
From an advisory covering 4 CVEs
 before 0.9.1.2-10ubuntu0.20.04.1+esm1, plus listed versions
0.9.1.2-100.9.1.2-10ubuntu0.20.04.1
0.9.1.2-10ubuntu0.20.04.1+esm1
c3p0
Ubuntu:Pro:22.04:LTS
From an advisory covering 4 CVEs
 before 0.9.1.2-10ubuntu1+esm1, plus listed versions
0.9.1.2-100.9.1.2-10ubuntu1
0.9.1.2-10ubuntu1+esm1
c3p0
Ubuntu:Pro:24.04:LTS
From an advisory covering 4 CVEs
 before 0.9.1.2-10ubuntu2+esm1, plus listed versions
0.9.1.2-10ubuntu10.9.1.2-10ubuntu2
0.9.1.2-10ubuntu2+esm1
c3p0
Ubuntu:Pro:26.04:LTS
From an advisory covering 4 CVEs
 before 0.9.1.2-11ubuntu0.1~esm1, plus listed versions
0.9.1.2-10ubuntu20.9.1.2-11
0.9.1.2-11ubuntu0.1~esm1
c3p0
openSUSE:Tumbleweed
 before 0.12.0-1.1
0.12.0-1.1
mchange-commons
openSUSE:Tumbleweed
 before 0.4.0-1.1
0.4.0-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-27727 is a high vulnerability (CVSS 8.9) in Swaldman Mchange-commons-java, published February 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in com.mchange:mchange-commons-java 0.4.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 34 package rows and 171 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open