CVE-2012-3546
Authentication Bypass in Apache Tomcat
4.3 MediumFix available
CVE-2012-3546 is a medium vulnerability (CVSS 4.3) in Apache Tomcat, published December 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.0%, the 96th percentile. Fixed in org.apache.tomcat:tomcat 6.0.36.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 12.0%EPSS, 96th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
6.0.36org.apache.tomcat:tomcat +299 more
Description
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
Exploit likelihood
12.0%Up 4.6 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.tomcat:tomcatMaven | 6.0.0 up to 6.0.36 | 6.0.36 |
org.apache.tomcat:tomcatMaven | 7.0.0 up to 7.0.30 | 7.0.30 |
tomcat6Red Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:2::el5 | before 0:6.0.35-6_patch_02.ep6.el5 | 0:6.0.35-6_patch_02.ep6.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-libRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:2::el6 | before 0:6.0.35-25_patch_01.ep6.el6 | 0:6.0.35-25_patch_01.ep6.el6 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 | before 0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4 | 0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 | before 0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4 | 0:4.3.0-11.GA_CP10_patch_02.1.ep1.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 | before 0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5 | 0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 | before 0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5 | 0:4.3.0-11.GA_CP10_patch_02.2.ep1.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el5 | before 0:6.0.32-28_patch_08.ep5.el5 | 0:6.0.32-28_patch_08.ep5.el5 |
tomcat6Red Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-admin-webappsRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-docs-webappRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-el-1.0-apiRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-javadocRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-jsp-2.1-apiRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-libRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-log4jRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-servlet-2.5-apiRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
tomcat6-webappsRed Hat:jboss_enterprise_web_server:1::el6 | before 0:6.0.32-31_patch_08.ep5.el6 | 0:6.0.32-31_patch_08.ep5.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.0.17-3.Final_redhat_2.ep6.el5 | 0:7.0.17-3.Final_redhat_2.ep6.el5 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:6::el5 | before 0:7.0.17-3.Final_redhat_2.ep6.el5 | 0:7.0.17-3.Final_redhat_2.ep6.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.0.17-3.Final_redhat_2.ep6.el6 | 0:7.0.17-3.Final_redhat_2.ep6.el6 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:6::el6 | before 0:7.0.17-3.Final_redhat_2.ep6.el6 | 0:7.0.17-3.Final_redhat_2.ep6.el6 |
aopallianceRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0-5.3.ep5.el6 | 0:1.0-5.3.ep5.el6 |
apache-cxfRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.12-6.1.patch_04.ep5.el6 | 0:2.2.12-6.1.patch_04.ep5.el6 |
bsh2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0-0.b4.15.patch01.ep5.el6 | 0:2.0-0.b4.15.patch01.ep5.el6 |
bsh2-bsfRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0-0.b4.15.patch01.ep5.el6 | 0:2.0-0.b4.15.patch01.ep5.el6 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.12-12_patch_03.ep5.el6 | 0:2.1.12-12_patch_03.ep5.el6 |
google-guiceRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0-3.ep5.el6 | 0:2.0-3.ep5.el6 |
hibernate3Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:3.3.2-1.9.GA_CP05.ep5.el6 | 1:3.3.2-1.9.GA_CP05.ep5.el6 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.4.0-3.6.GA_CP05.ep5.el6 | 0:3.4.0-3.6.GA_CP05.ep5.el6 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.4.0-3.6.GA_CP05.ep5.el6 | 0:3.4.0-3.6.GA_CP05.ep5.el6 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.4.0-4.5.GA_CP05.ep5.el6 | 0:3.4.0-4.5.GA_CP05.ep5.el6 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.4.0-4.5.GA_CP05.ep5.el6 | 0:3.4.0-4.5.GA_CP05.ep5.el6 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:3.3.2-1.9.GA_CP05.ep5.el6 | 1:3.3.2-1.9.GA_CP05.ep5.el6 |
hibernate3-searchRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.1.1-2.5.GA_CP05.ep5.el6 | 0:3.1.1-2.5.GA_CP05.ep5.el6 |
hibernate3-search-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.1.1-2.5.GA_CP05.ep5.el6 | 0:3.1.1-2.5.GA_CP05.ep5.el6 |
hornetqRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.24-1.EAP.GA.ep5.el6 | 0:2.2.24-1.EAP.GA.ep5.el6 |
hornetq-nativeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.20-1.EAP.GA.ep5.el6 | 0:2.2.20-1.EAP.GA.ep5.el6 |
hsqldbRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 2:1.8.0.10-11_patch_01.1.ep5.el6 | 2:1.8.0.10-11_patch_01.1.ep5.el6 |
jacorb-jbossRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.3.2-2.jboss_1.ep5.el6 | 0:2.3.2-2.jboss_1.ep5.el6 |
javassistRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.12.0-6.SP1.ep5.el6 | 0:3.12.0-6.SP1.ep5.el6 |
jboss-aop2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.6-5.CP06.ep5.el6 | 0:2.1.6-5.CP06.ep5.el6 |
jboss-bootstrapRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.2-1.ep5.el6 | 0:1.0.2-1.ep5.el6 |
jboss-cache-coreRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.2.11-1.GA.ep5.el6 | 0:3.2.11-1.GA.ep5.el6 |
jboss-cache-pojoRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.1-1.ep5.el6 | 0:3.0.1-1.ep5.el6 |
jboss-clRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0.11-4.GA.ep5.el6 | 0:2.0.11-4.GA.ep5.el6 |
jboss-cluster-ha-server-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.2.1-2.ep5.el6 | 0:1.2.1-2.ep5.el6 |
jboss-common-beansRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.1-2.Final.ep5.el6 | 0:1.0.1-2.Final.ep5.el6 |
jboss-common-coreRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.21-1.ep5.el6 | 0:2.2.21-1.ep5.el6 |
jboss-eap5-nativeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-6.ep5.el6 | 0:5.2.0-6.ep5.el6 |
jboss-ejb-3.0-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-ejb3-cacheRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-4.ep5.el6 | 0:1.0.0-4.ep5.el6 |
jboss-ejb3-coreRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.9-0.4.ep5.el6 | 0:1.3.9-0.4.ep5.el6 |
jboss-ejb3-ext-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-4.1.ep5.el6 | 0:1.0.0-4.1.ep5.el6 |
jboss-ejb3-ext-api-implRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-3.7.ep5.el6 | 0:1.0.0-3.7.ep5.el6 |
jboss-ejb3-interceptorsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.9-0.2.ep5.el6 | 0:1.0.9-0.2.ep5.el6 |
jboss-ejb3-metadataRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-3.ep5.el6 | 0:1.0.0-3.ep5.el6 |
jboss-ejb3-metrics-deployerRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.1.1-0.1.ep5.el6 | 0:1.1.1-0.1.ep5.el6 |
jboss-ejb3-securityRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.2-0.5.ep5.el6 | 0:1.0.2-0.5.ep5.el6 |
jboss-ejb3-timeoutRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:0.1.1-0.8.ep5.el6 | 0:0.1.1-0.8.ep5.el6 |
jboss-ejb3-timeout-3.0-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:0.1.1-0.8.ep5.el6 | 0:0.1.1-0.8.ep5.el6 |
jboss-ejb3-timeout-spiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:0.1.1-0.8.ep5.el6 | 0:0.1.1-0.8.ep5.el6 |
jboss-ejb3-transactionsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.2-1.6.ep5.el6 | 0:1.0.2-1.6.ep5.el6 |
jboss-jacc-1.1-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-jad-1.2-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-jaspi-1.0-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-javaeeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-javaee-pomsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-jaxrpc-api_1.1_specRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-16.ep5.el6 | 0:1.0.0-16.ep5.el6 |
jboss-jca-1.5-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-jpa-deployersRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.0-6.SP2.ep5.el6 | 0:1.0.0-6.SP2.ep5.el6 |
jboss-logmanagerRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.1.2-6.GA_patch_01.ep5.el6 | 0:1.1.2-6.GA_patch_01.ep5.el6 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.4.8-12.SP9.1.ep5.el6 | 0:1.4.8-12.SP9.1.ep5.el6 |
jboss-namingRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.3-5.CP02.ep5.el6 | 0:5.0.3-5.CP02.ep5.el6 |
jboss-reflectRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0.4-2.ep5.el6 | 0:2.0.4-2.ep5.el6 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.4-10.SP4.1.ep5.el6 | 0:2.5.4-10.SP4.1.ep5.el6 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-14.ep5.el6 | 0:2.2.6.EAP5-14.ep5.el6 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-14.ep5.el6 | 0:2.2.6.EAP5-14.ep5.el6 |
jboss-seam2-examplesRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-14.ep5.el6 | 0:2.2.6.EAP5-14.ep5.el6 |
jboss-seam2-runtimeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-14.ep5.el6 | 0:2.2.6.EAP5-14.ep5.el6 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.3-1.GA.ep5.el6 | 0:2.1.3-1.GA.ep5.el6 |
jboss-security-spiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:2.0.5-4.SP3_1.ep5.el6 | 1:2.0.5-4.SP3_1.ep5.el6 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el6 | 0:5.0.2-2.ep5.el6 |
jboss-vfs2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.2.1-4.GA.ep5.el6 | 0:2.2.1-4.GA.ep5.el6 |
jbossasRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-16.ep5.el6 | 0:5.2.0-16.ep5.el6 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-16.ep5.el6 | 0:5.2.0-16.ep5.el6 |
jbossas-hornetqRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-7.ep5.el6 | 0:5.2.0-7.ep5.el6 |
jbossas-messagingRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-16.ep5.el6 | 0:5.2.0-16.ep5.el6 |
jbossas-tp-licensesRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-8.ep5.el6 | 0:5.2.0-8.ep5.el6 |
jbossas-ws-cxfRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-10.ep5.el6 | 0:5.2.0-10.ep5.el6 |
jbossas-ws-nativeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-16.ep5.el6 | 0:5.2.0-16.ep5.el6 |
jbosssx2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.0.5-8.3.SP3_1.ep5.el6 | 0:2.0.5-8.3.SP3_1.ep5.el6 |
jbosstsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:4.6.1-12.CP13.7.ep5.el6 | 1:4.6.1-12.CP13.7.ep5.el6 |
jbossts-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:4.6.1-12.CP13.7.ep5.el6 | 1:4.6.1-12.CP13.7.ep5.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el6 | 0:2.1.13-2_patch_01.ep5.el6 |
jbossweb-el-1.0-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el6 | 0:2.1.13-2_patch_01.ep5.el6 |
jbossweb-jsp-2.1-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el6 | 0:2.1.13-2_patch_01.ep5.el6 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el6 | 0:2.1.13-2_patch_01.ep5.el6 |
jbossweb-servlet-2.5-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el6 | 0:2.1.13-2_patch_01.ep5.el6 |
jbosswsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.1.2-13.SP15_patch_01.ep5.el6 | 0:3.1.2-13.SP15_patch_01.ep5.el6 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.1.0-9.SP10.ep5.el6 | 0:1.1.0-9.SP10.ep5.el6 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.1.2-9.SP13.ep5.el6 | 0:3.1.2-9.SP13.ep5.el6 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.1.2-6.SP8.ep5.el6 | 0:1.1.2-6.SP8.ep5.el6 |
jgroupsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 1:2.6.22-1.ep5.el6 | 1:2.6.22-1.ep5.el6 |
jopr-embeddedRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.4-19.SP6.9.ep5.el6 | 0:1.3.4-19.SP6.9.ep5.el6 |
jopr-hibernate-pluginRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-14.EmbJopr5.ep5.el6 | 0:3.0.0-14.EmbJopr5.ep5.el6 |
jopr-jboss-as-5-pluginRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-16.EmbJopr5.ep5.el6 | 0:3.0.0-16.EmbJopr5.ep5.el6 |
jopr-jboss-cache-v3-pluginRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-15.EmbJopr5.ep5.el6 | 0:3.0.0-15.EmbJopr5.ep5.el6 |
mod_clusterRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el6 | 0:1.0.10-12.2.GA_CP04.ep5.el6 |
mod_cluster-demoRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el6 | 0:1.0.10-12.2.GA_CP04.ep5.el6 |
mod_cluster-jbossasRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el6 | 0:1.0.10-12.2.GA_CP04.ep5.el6 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el6 | 0:1.0.10-12.2.GA_CP04.ep5.el6 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-10.GA_CP04_patch01.ep5.el6 | 0:1.0.10-10.GA_CP04_patch01.ep5.el6 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el6 | 0:1.0.10-12.2.GA_CP04.ep5.el6 |
nettyRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.2.5-6.ep5.el6 | 0:3.2.5-6.ep5.el6 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.5-3.ep5.el6 | 0:2.1.5-3.ep5.el6 |
picketlink-quickstartsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el6 | 0:2.1.5-1.ep5.el6 |
picketlink-quickstarts-idpRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el6 | 0:2.1.5-1.ep5.el6 |
picketlink-quickstarts-pdpRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el6 | 0:2.1.5-1.ep5.el6 |
picketlink-quickstarts-stsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el6 | 0:2.1.5-1.ep5.el6 |
resteasyRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.2.1-17.CP02_patch02.1.ep5.el6 | 0:1.2.1-17.CP02_patch02.1.ep5.el6 |
resteasy-examplesRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.2.1-17.CP02_patch02.1.ep5.el6 | 0:1.2.1-17.CP02_patch02.1.ep5.el6 |
resteasy-javadocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.2.1-17.CP02_patch02.1.ep5.el6 | 0:1.2.1-17.CP02_patch02.1.ep5.el6 |
resteasy-manualRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.2.1-17.CP02_patch02.1.ep5.el6 | 0:1.2.1-17.CP02_patch02.1.ep5.el6 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-10.ep5.el6 | 0:5.2.0-10.ep5.el6 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:5.2.0-10.ep5.el6 | 0:5.2.0-10.ep5.el6 |
rhqRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-ant-bundle-commonRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-common-parentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-client-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-comm-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-dbutilsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-domainRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-guiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-native-systemRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-parentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-plugin-apiRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-plugin-containerRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-plugindocRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-core-utilRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-filetemplate-bundle-commonRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-helpersRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-jboss-as-commonRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-jmx-pluginRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-modules-parentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-parentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-platform-pluginRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-14.EmbJopr5.ep5.el6 | 0:3.0.0-14.EmbJopr5.ep5.el6 |
rhq-plugin-validatorRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-pluginAnnotationsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-pluginGenRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-plugins-parentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
rhq-rtfilterRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:3.0.0-21.EmbJopr5.ep5.el6 | 0:3.0.0-21.EmbJopr5.ep5.el6 |
spring2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-agentRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-allRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-aopRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-beansRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-contextRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
spring2-coreRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.5.6-9.SEC03.1.ep5.el6 | 0:2.5.6-9.SEC03.1.ep5.el6 |
wss4jRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.5.12-4_patch_02.ep5.el6 | 0:1.5.12-4_patch_02.ep5.el6 |
xerces-j2Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.9.1-10.patch02.ep5.el6 | 0:2.9.1-10.patch02.ep5.el6 |
xerces-j2-scriptsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:2.9.1-10.patch02.ep5.el6 | 0:2.9.1-10.patch02.ep5.el6 |
xml-commonsRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-jaxp-1.1-apisRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-jaxp-1.2-apisRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-jaxp-1.3-apisRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-resolver10Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-resolver11Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-resolver12Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-which10Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-commons-which11Red Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.3.04-8.2_patch_01.ep5.el6 | 0:1.3.04-8.2_patch_01.ep5.el6 |
xml-securityRed Hat:jboss_enterprise_application_platform:5::el6 From an advisory covering 14 CVEs | before 0:1.5.1-2.ep5.el6 | 0:1.5.1-2.ep5.el6 |
aopallianceRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0-5.2.jdk6.ep5.el5 | 0:1.0-5.2.jdk6.ep5.el5 |
apache-cxfRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.12-6.1.patch_04.ep5.el5 | 0:2.2.12-6.1.patch_04.ep5.el5 |
bsh2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0-0.b4.15.1.patch01.ep5.el5 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
bsh2-bsfRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0-0.b4.15.1.patch01.ep5.el5 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.12-12_patch_03.ep5.el5 | 0:2.1.12-12_patch_03.ep5.el5 |
google-guiceRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0-3.ep5.el5 | 0:2.0-3.ep5.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:3.3.2-1.5.GA_CP05.ep5.el5 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.4.0-3.3.GA_CP05.ep5.el5 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.4.0-3.3.GA_CP05.ep5.el5 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.4.0-4.4.GA_CP05.ep5.el5 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.4.0-4.4.GA_CP05.ep5.el5 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:3.3.2-1.5.GA_CP05.ep5.el5 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
hibernate3-searchRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.1.1-2.4.GA_CP05.ep5.el5 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
hibernate3-search-javadocRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.1.1-2.4.GA_CP05.ep5.el5 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
hornetqRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.24-1.EAP.GA.ep5.el5 | 0:2.2.24-1.EAP.GA.ep5.el5 |
hornetq-nativeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.20-1.EAP.GA.1.ep5.el5 | 0:2.2.20-1.EAP.GA.1.ep5.el5 |
jacorb-jbossRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.3.2-2.jboss_1.ep5.el5 | 0:2.3.2-2.jboss_1.ep5.el5 |
javassistRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.12.0-6.SP1.ep5.el5 | 0:3.12.0-6.SP1.ep5.el5 |
jboss-aop2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.6-5.CP06.ep5.el5 | 0:2.1.6-5.CP06.ep5.el5 |
jboss-bootstrapRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.2-1.ep5.el5 | 0:1.0.2-1.ep5.el5 |
jboss-cache-coreRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.2.11-1.GA.ep5.el5 | 0:3.2.11-1.GA.ep5.el5 |
jboss-cache-pojoRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.0.1-1.1.ep5.el5 | 0:3.0.1-1.1.ep5.el5 |
jboss-clRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0.11-1.GA.ep5.el5 | 0:2.0.11-1.GA.ep5.el5 |
jboss-cluster-ha-server-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.2.1-2.ep5.el5 | 0:1.2.1-2.ep5.el5 |
jboss-common-beansRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.1-2.1.Final.ep5.el5 | 0:1.0.1-2.1.Final.ep5.el5 |
jboss-common-coreRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.21-1.ep5.el5 | 0:2.2.21-1.ep5.el5 |
jboss-eap5-nativeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-6.ep5.el5 | 0:5.2.0-6.ep5.el5 |
jboss-ejb-3.0-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-ejb3-cacheRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-4.ep5.el5 | 0:1.0.0-4.ep5.el5 |
jboss-ejb3-coreRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.3.9-0.4.ep5.el5 | 0:1.3.9-0.4.ep5.el5 |
jboss-ejb3-ext-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-4.1.ep5.el5 | 0:1.0.0-4.1.ep5.el5 |
jboss-ejb3-ext-api-implRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-3.7.ep5.el5 | 0:1.0.0-3.7.ep5.el5 |
jboss-ejb3-interceptorsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.9-0.1.ep5.el5 | 0:1.0.9-0.1.ep5.el5 |
jboss-ejb3-metadataRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-3.ep5.el5 | 0:1.0.0-3.ep5.el5 |
jboss-ejb3-metrics-deployerRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.1.1-0.1.ep5.el5 | 0:1.1.1-0.1.ep5.el5 |
jboss-ejb3-securityRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.2-0.5.ep5.el5 | 0:1.0.2-0.5.ep5.el5 |
jboss-ejb3-timeoutRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:0.1.1-0.5.ep5.el5 | 0:0.1.1-0.5.ep5.el5 |
jboss-ejb3-timeout-3.0-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:0.1.1-0.5.ep5.el5 | 0:0.1.1-0.5.ep5.el5 |
jboss-ejb3-timeout-spiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:0.1.1-0.5.ep5.el5 | 0:0.1.1-0.5.ep5.el5 |
jboss-ejb3-transactionsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.2-1.4.ep5.el5 | 0:1.0.2-1.4.ep5.el5 |
jboss-jacc-1.1-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-jad-1.2-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-jaspi-1.0-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-javaeeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-javaee-pomsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-jaxrpc-api_1.1_specRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-16.ep5.el5 | 0:1.0.0-16.ep5.el5 |
jboss-jca-1.5-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-jms-1.1-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-jpa-deployersRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.0-6.1SP2.ep5.el5 | 0:1.0.0-6.1SP2.ep5.el5 |
jboss-logmanagerRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.1.2-6.GA_patch_01.ep5.el5 | 0:1.1.2-6.GA_patch_01.ep5.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.4.8-12.SP9.1.ep5.el5 | 0:1.4.8-12.SP9.1.ep5.el5 |
jboss-namingRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.3-5.1.CP02.ep5.el5 | 0:5.0.3-5.1.CP02.ep5.el5 |
jboss-reflectRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0.4-2.1.ep5.el5 | 0:2.0.4-2.1.ep5.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.5.4-10.SP4.1.ep5.el5 | 0:2.5.4-10.SP4.1.ep5.el5 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-10.ep5.el5 | 0:2.2.6.EAP5-10.ep5.el5 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-10.ep5.el5 | 0:2.2.6.EAP5-10.ep5.el5 |
jboss-seam2-examplesRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-10.ep5.el5 | 0:2.2.6.EAP5-10.ep5.el5 |
jboss-seam2-runtimeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.6.EAP5-10.ep5.el5 | 0:2.2.6.EAP5-10.ep5.el5 |
jboss-security-negotiationRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.3-1.GA.ep5.el5 | 0:2.1.3-1.GA.ep5.el5 |
jboss-security-spiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:2.0.5-4.SP3_1.ep5.el5 | 1:2.0.5-4.SP3_1.ep5.el5 |
jboss-transaction-1.0.1-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.0.2-2.ep5.el5 | 0:5.0.2-2.ep5.el5 |
jboss-vfs2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.2.1-4.GA.ep5.el5 | 0:2.2.1-4.GA.ep5.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-14.ep5.el5 | 0:5.2.0-14.ep5.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-14.ep5.el5 | 0:5.2.0-14.ep5.el5 |
jbossas-hornetqRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-5.ep5.el5 | 0:5.2.0-5.ep5.el5 |
jbossas-messagingRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-14.ep5.el5 | 0:5.2.0-14.ep5.el5 |
jbossas-tp-licensesRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-7.ep5.el5 | 0:5.2.0-7.ep5.el5 |
jbossas-ws-cxfRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-7.ep5.el5 | 0:5.2.0-7.ep5.el5 |
jbossas-ws-nativeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:5.2.0-14.ep5.el5 | 0:5.2.0-14.ep5.el5 |
jbosssx2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.0.5-8.SP3_1.ep5.el5 | 0:2.0.5-8.SP3_1.ep5.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:4.6.1-12.CP13.8.ep5.el5 | 1:4.6.1-12.CP13.8.ep5.el5 |
jbossts-javadocRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:4.6.1-12.CP13.8.ep5.el5 | 1:4.6.1-12.CP13.8.ep5.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el5 | 0:2.1.13-2_patch_01.ep5.el5 |
jbossweb-el-1.0-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el5 | 0:2.1.13-2_patch_01.ep5.el5 |
jbossweb-jsp-2.1-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el5 | 0:2.1.13-2_patch_01.ep5.el5 |
jbossweb-libRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el5 | 0:2.1.13-2_patch_01.ep5.el5 |
jbossweb-servlet-2.5-apiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.13-2_patch_01.ep5.el5 | 0:2.1.13-2_patch_01.ep5.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.1.2-13.SP15_patch_01.ep5.el5 | 0:3.1.2-13.SP15_patch_01.ep5.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.1.0-9.SP10.ep5.el5 | 0:1.1.0-9.SP10.ep5.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.1.2-9.SP13.ep5.el5 | 0:3.1.2-9.SP13.ep5.el5 |
jbossws-spiRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.1.2-6.SP8.ep5.el5 | 0:1.1.2-6.SP8.ep5.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 1:2.6.22-1.ep5.el5 | 1:2.6.22-1.ep5.el5 |
jopr-embeddedRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.3.4-19.SP6.9.ep5.el5 | 0:1.3.4-19.SP6.9.ep5.el5 |
jopr-hibernate-pluginRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.0.0-14.EmbJopr5.ep5.el5 | 0:3.0.0-14.EmbJopr5.ep5.el5 |
jopr-jboss-as-5-pluginRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.0.0-14.EmbJopr5.ep5.el5 | 0:3.0.0-14.EmbJopr5.ep5.el5 |
jopr-jboss-cache-v3-pluginRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.0.0-15.EmbJopr5.ep5.el5 | 0:3.0.0-15.EmbJopr5.ep5.el5 |
mod_clusterRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el5 | 0:1.0.10-12.2.GA_CP04.ep5.el5 |
mod_cluster-demoRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el5 | 0:1.0.10-12.2.GA_CP04.ep5.el5 |
mod_cluster-jbossasRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el5 | 0:1.0.10-12.2.GA_CP04.ep5.el5 |
mod_cluster-jbossweb2Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el5 | 0:1.0.10-12.2.GA_CP04.ep5.el5 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-10.GA_CP04_patch01.ep5.el5 | 0:1.0.10-10.GA_CP04_patch01.ep5.el5 |
mod_cluster-tomcat6Red Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.0.10-12.2.GA_CP04.ep5.el5 | 0:1.0.10-12.2.GA_CP04.ep5.el5 |
nettyRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:3.2.5-6.ep5.el5 | 0:3.2.5-6.ep5.el5 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.5-3.ep5.el5 | 0:2.1.5-3.ep5.el5 |
picketlink-quickstartsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el5 | 0:2.1.5-1.ep5.el5 |
picketlink-quickstarts-idpRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el5 | 0:2.1.5-1.ep5.el5 |
picketlink-quickstarts-pdpRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el5 | 0:2.1.5-1.ep5.el5 |
picketlink-quickstarts-stsRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:2.1.5-1.ep5.el5 | 0:2.1.5-1.ep5.el5 |
resteasyRed Hat:jboss_enterprise_application_platform:5::el5 From an advisory covering 14 CVEs | before 0:1.2.1-18.CP02_patch02.1.ep5.el5 | 0:1.2.1-18.CP02_patch02.1.ep5.el5 |
What each source reports
NVD Score used
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
- Record
CVE-2012-3546- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
- Record
CVE-2012-3546- Updated
- 2026-11-02
EUVDEUVD-2022-4361No score
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
- Record
EUVD-2022-4361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jgm2-m5cg-f66gNo score
Authentication Bypass in Apache Tomcat
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
- Record
GHSA-jgm2-m5cg-f66g- Weakness
- CWE-287
- Updated
- 2026-11-02
OSVGHSA-jgm2-m5cg-f66gNo score
Authentication Bypass in Apache Tomcat
org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows remote attackers to bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.
- Record
GHSA-jgm2-m5cg-f66g- Weakness
- CWE-287
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=136612293908376&w=2
securitytracker.com/id?1027833
ubuntu.com/usn/USN-1685-1
securityfocus.com/bid/56812
lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
svn.apache.org/viewvc?view=revision&revision=1377892
Show 147 moreShow less
rhn.redhat.com/errata/RHSA-2013-0640.html
h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878
archives.neohapsis.com/archives/bugtraq/2012-12/0044.html
tomcat.apache.org/security-7.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19305
secunia.com/advisories/51984
nvd.nist.gov/vuln/detail/CVE-2012-3546
github.com/apache/tomcat/commit/f78c0cdfc8a3c2efdfe6df6b69e5e3daafa3f588
access.redhat.com/errata/RHSA-2013:0005
bugzilla.redhat.com/show_bug.cgi?id=883634
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0005.json
cve.org/CVERecord?id=CVE-2012-3546
nds.ruhr-uni-bochum.de/research/publications/breaking-xml-encryption-pkcs15
cxf.apache.org/cve-2012-2379.html
This page doesn't list everything
Left out here: 683 package rows. The JSON record has them.