CVE-2009-0217
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
5.0 MediumFix available
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
Exploit likelihood
6.36%Down 4.1 points since Feb 4, 2022
What each source reports
NVD Score used
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- Updated
- 2026-11-02
EUVDEUVD-2022-3187 No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
EUVD-2022-3187- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hfm-837h-hjg5 No score
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in multiple products.
The Apache XML Security (Java) is affected by the vulnerability published in US-Cert VU #466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow an attacker to bypass authentication by inserting/modifying a small HMAC truncation length parameter in the XML Signature HMAC based SignatureMethod algorithms.
An inexhaustive list of additional affected products includes:
- the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM;
- the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6;
- Mono before 2.4.2.2;
- XML Security Library before 1.2.12;
- IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1;
- Sun JDK and JRE Update 14 and earlier;
- Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
GHSA-8hfm-837h-hjg5- Updated
- 2026-11-02
OSV No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
CVE-2009-0217- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0217 No score
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6; (3) Mono before 2.4.2.2; (4) XML Security Library before 1.2.12; (5) IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1; (6) Sun JDK and JRE Update 14 and earlier; (7) Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
DEBIAN-CVE-2009-0217- Updated
- 2026-11-02
OSVGHSA-8hfm-837h-hjg5 No score
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in multiple products.
The Apache XML Security (Java) is affected by the vulnerability published in US-Cert VU #466161. See: http://www.kb.cert.org/vuls/id/466161 for more information. This bug can allow an attacker to bypass authentication by inserting/modifying a small HMAC truncation length parameter in the XML Signature HMAC based SignatureMethod algorithms.
An inexhaustive list of additional affected products includes:
- the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM;
- the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, and 8.1 SP6;
- Mono before 2.4.2.2;
- XML Security Library before 1.2.12;
- IBM WebSphere Application Server Versions 6.0 through 6.0.2.33, 6.1 through 6.1.0.23, and 7.0 through 7.0.0.1;
- Sun JDK and JRE Update 14 and earlier;
- Microsoft .NET Framework 3.0 through 3.0 SP2, 3.5, and 4.0; and other products uses a parameter that defines an HMAC truncation length (HMACOutputLength) but does not require a minimum for this length, which allows attackers to spoof HMAC-based signatures and bypass authentication by specifying a truncation length with a small number of bits.
- Record
GHSA-8hfm-837h-hjg5- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.santuario:xmlsecMaven |
1.4.0 up to 1.4.3 | 1.4.3 |
monoDebian:12 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
monoDebian:13 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
monoDebian:14 |
before 2.4.2.3+dfsg-1 | 2.4.2.3+dfsg-1 |
xml-security-cDebian:12 |
before 1.4.0-4 | 1.4.0-4 |
xml-security-cDebian:13 |
before 1.4.0-4 | 1.4.0-4 |
xml-security-cDebian:14 |
before 1.4.0-4 | 1.4.0-4 |
xmlsec1Debian:12 |
before 1.2.12-1 | 1.2.12-1 |
xmlsec1Debian:13 |
before 1.2.12-1 | 1.2.12-1 |
xmlsec1Debian:14 |
before 1.2.12-1 | 1.2.12-1 |
Show 227 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xml-security-cDebian:4.0 |
before 1.2.1-3+etch1, plus listed versions 1.2.1-3 |
1.2.1-3+etch1 |
xml-security-cDebian:5.0 |
before 1.4.0-3+lenny2, plus listed versions 1.4.0-3 |
1.4.0-3+lenny2 |
openoffice.orgDebian:4.0 |
before 2.0.4.dfsg.2-7etch9, plus listed versions 2.0.4.dfsg.2-5etch12.0.4.dfsg.2-5etch22.0.4.dfsg.2-62.0.4.dfsg.2-72.0.4.dfsg.2-7etch1 Show 6 moreShow less2.0.4.dfsg.2-7etch22.0.4.dfsg.2-7etch42.0.4.dfsg.2-7etch52.0.4.dfsg.2-7etch62.0.4.dfsg.2-7etch72.0.4.dfsg.2-7etch8 |
2.0.4.dfsg.2-7etch9 |
openoffice.orgDebian:5.0 |
before 1:2.4.1+dfsg-1+lenny6, plus listed versions 1:2.4.1+dfsg-11:2.4.1+dfsg-1+lenny11:2.4.1+dfsg-1+lenny31:2.4.1+dfsg-1+lenny41:2.4.1+dfsg-1+lenny51:2.4.1-17 |
1:2.4.1+dfsg-1+lenny6 |
openoffice.orgDebian:6.0 |
before 1:3.1.1-15+squeeze1 | 1:3.1.1-15+squeeze1 |
org.apache.santuario:xmlsecMaven |
1.4.0 up to 1.4.3, plus listed versions 1.4.11.4.2 |
1.4.3 |
java-1.6.0-sunRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-develRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sun-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.15-1jpp.1.el4 | 1:1.6.0.15-1jpp.1.el4 |
java-1.6.0-sunRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sunRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.15-1jpp.1.el5 | 1:1.6.0.15-1jpp.1.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::client |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdkRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-debuginfoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-demoRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-develRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-javadocRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
java-1.6.0-openjdk-srcRed Hat:enterprise_linux:5::server |
before 1:1.6.0.0-1.2.b09.el5 | 1:1.6.0.0-1.2.b09.el5 |
xmlsec1Red Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::as |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::desktop |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::es |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-develRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-opensslRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:4::ws |
before 0:1.2.6-3.1 | 0:1.2.6-3.1 |
xmlsec1Red Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutls-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nss-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:5::client_workstation |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1Red Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutlsRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nssRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-opensslRed Hat:enterprise_linux:5::client |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1Red Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutlsRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-gnutls-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nssRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-nss-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-opensslRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
xmlsec1-openssl-develRed Hat:enterprise_linux:5::server |
before 0:1.2.9-8.1.1 | 0:1.2.9-8.1.1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.1.4-1.12.patch03.ep1.el4 | 0:2.1.4-1.12.patch03.ep1.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.4.0-3.SP3_CP09.4.ep1.el4 | 0:1.4.0-3.SP3_CP09.4.ep1.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.2.FP-1.ep1.21.el4 | 0:2.0.2.FP-1.ep1.21.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:4.3.0-6.GA_CP07.4.ep1.el4 | 0:4.3.0-6.GA_CP07.4.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.0.0-2.GA_CP05.1.ep1.el4 | 0:1.0.0-2.GA_CP05.1.ep1.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.1-1.GA_CP05.1.ep1.el4 | 0:2.0.1-1.GA_CP05.1.ep1.el4 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.0.1-4.SP2_CP07.2.ep1.el4 | 0:2.0.1-4.SP2_CP07.2.ep1.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:4.3.0-6.GA_CP07.ep1.3.el4 | 0:4.3.0-6.GA_CP07.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el4 |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.4.2-0jpp.ep1.5.el4 | 0:1.4.2-0jpp.ep1.5.el4 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.2_13-2.1.ep1.el4 | 0:1.2_13-2.1.ep1.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:3.3.1-1.11.GA_CP02.ep1.el4 | 0:3.3.1-1.11.GA_CP02.ep1.el4 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:3.3.2-2.5.GA_CP01.ep1.el4 | 0:3.3.2-2.5.GA_CP01.ep1.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:2.3.0-1jpp.ep1.9.el4 | 0:2.3.0-1jpp.ep1.9.el4 |
jakarta-commons-logging-jbossRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.1-9.ep1.el4 | 0:1.1-9.ep1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.5.5-3.CP04.2.ep1.el4 | 0:1.5.5-3.CP04.2.ep1.el4 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.2.1-0jpp.ep1.3.el4 | 0:1.2.1-0jpp.ep1.3.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:2.2.3-3.SP1.ep1.el4 | 0:2.2.3-3.SP1.ep1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.2.1-1.ep1.22.el4 | 0:1.2.1-1.ep1.22.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:4.2.0-5.GA_CP08.5.ep1.el4 | 0:4.2.0-5.GA_CP08.5.ep1.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el4 | 0:2.0.0-6.CP12.0jpp.ep1.2.el4 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.0.16-1.1.ep1.el4 | 0:1.0.16-1.1.ep1.el4 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.0.13-2.3.1.ep1.el4 | 0:1.0.13-2.3.1.ep1.el4 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 1:2.4.7-1.ep1.el4 | 1:2.4.7-1.ep1.el4 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.5.2-1jpp.patch01.ep1.4.el4 | 0:1.5.2-1jpp.patch01.ep1.4.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:4.2.0-6.GA_CP08.ep1.3.el4 | 0:4.2.0-6.GA_CP08.ep1.3.el4 |
xerces-j2Red Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 | 0:2.7.1-9jpp.4.patch_02.1.ep1.el4 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el4 |
before 0:1.3.0-1.3.patch01.ep1.2.el4 | 0:1.3.0-1.3.patch01.ep1.2.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.1.4-1.12.patch03.1.ep1.el5 | 0:2.1.4-1.12.patch03.1.ep1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.4.0-3.SP3_CP09.4.ep1.el5 | 0:1.4.0-3.SP3_CP09.4.ep1.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1 |
jboss-seam2Red Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jboss-seam2-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.2.FP-1.ep1.18.el5 | 0:2.0.2.FP-1.ep1.18.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-4.3.0.GA_CP07-binRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:4.3.0-6.GA_CP07.4.2.ep1.el5 | 0:4.3.0-6.GA_CP07.4.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.0.0-2.GA_CP05.1.ep1.el5 | 0:1.0.0-2.GA_CP05.1.ep1.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.1-1.GA_CP05.1.ep1.el5 | 0:2.0.1-1.GA_CP05.1.ep1.el5 |
jbossws-native42Red Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 | 0:2.0.1-4.SP2_CP07.2.1.ep1.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:4.3.0-6.GA_CP07.ep1.3.el5 | 0:4.3.0-6.GA_CP07.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.3.0::el5 |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
glassfish-jsfRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.2_13-2.1.ep1.el5 | 0:1.2_13-2.1.ep1.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:3.3.1-1.11GA_CP02.ep1.el5 | 0:3.3.1-1.11GA_CP02.ep1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:3.3.2-2.5.1.ep1.el5 | 0:3.3.2-2.5.1.ep1.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 | 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5 |
jacorbRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:2.3.0-1jpp.ep1.9.1.el5 | 0:2.3.0-1jpp.ep1.9.1.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.5.5-3.CP04.2.ep1.el5 | 0:1.5.5-3.CP04.2.ep1.el5 |
jboss-commonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.2.1-0jpp.ep1.3.el5.1 | 0:1.2.1-0jpp.ep1.3.el5.1 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:2.2.3-3.SP1.ep1.el5 | 0:2.2.3-3.SP1.ep1.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.2.1-1.ep1.14.el5 | 0:1.2.1-1.ep1.14.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-4.2.0.GA_CP08-binRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbossas-clientRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:4.2.0-5.GA_CP08.5.2.ep1.el5 | 0:4.2.0-5.GA_CP08.5.2.ep1.el5 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 | 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:2.0.0-6.CP12.0jpp.ep1.2.el5 | 0:2.0.0-6.CP12.0jpp.ep1.2.el5 |
jcommonRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.0.16-1.1.ep1.el5 | 0:1.0.16-1.1.ep1.el5 |
jfreechartRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.0.13-2.3.1.ep1.el5 | 0:1.0.13-2.3.1.ep1.el5 |
jgroupsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 1:2.4.7-1.ep1.el5 | 1:2.4.7-1.ep1.el5 |
quartzRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.5.2-1jpp.patch01.ep1.4.1.el5 | 0:1.5.2-1jpp.patch01.ep1.4.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:4.2.0-6.GA_CP08.ep1.3.el5 | 0:4.2.0-6.GA_CP08.ep1.3.el5 |
xml-securityRed Hat:jboss_enterprise_application_platform:4.2.0::el5 |
before 0:1.3.0-1.3.patch01.ep1.2.1.el5 | 0:1.3.0-1.3.patch01.ep1.2.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el4 |
before 1:1.6.0.7-1jpp.3.el4 | 1:1.6.0.7-1jpp.3.el4 |
java-1.6.0-ibmRed Hat:network_satellite:5.3::el5 |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.3::el5 |
before 1:1.6.0.7-1jpp.2.el5 | 1:1.6.0.7-1jpp.2.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0217 is a medium vulnerability (CVSS 5.0) in Ibm Websphere Application Server, published July 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.36%, the 93rd percentile. Fixed in org.apache.santuario:xmlsec 1.4.3.
References
rhn.redhat.com/errata/RHSA-2009-1428.html
vupen.com/english/advisories/2009/3122
openoffice.org/security/cves/CVE-2009-0217.html
issues.apache.org/bugzilla/show_bug.cgi?id=47526
secunia.com/advisories/60799
gentoo.org/security/en/glsa/glsa-201408-19.xml
Show 194 moreShow less
www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&dc=D400&uid=swg24023545&loc=en_US&cs=UTF-8&lang=en&rss=ct180websphere
sunsolve.sun.com/search/document.do?assetkey=1-66-269208-1
debian.org/security/2010/dsa-1995
marc.info?l=bugtraq&m=125787273209737&w=2
redhat.com/support/errata/RHSA-2009-1694.html
kb.cert.org/vuls/id/WDON-7TY529
mono-project.com/Vulnerabilities
ubuntu.com/usn/USN-903-1
securityfocus.com/bid/35671
osvdb.org/55907
mandriva.com/security/advisories?name=MDVSA-2009:209
lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html
blogs.sun.com/security/entry/cert_vulnerability_note_vu_466161
securitytracker.com/id?1022561
oracle.com/technetwork/topics/security/cpuoct2010-175626.html
us-cert.gov/cas/techalerts/TA09-294A.html
svn.apache.org/viewvc?revision=794013&view=revision
w3.org/2008/06/xmldsigcore-errata.html
usn.ubuntu.com/826-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7158
git.gnome.org/cgit/xmlsec/commit?id=34b349675af9f72eb822837a8772cc1ead7115c7
lists.apple.com/archives/security-announce/2009/Sep/msg00000.html
aleksey.com/xmlsec
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-041
bugzilla.redhat.com/show_bug.cgi?id=511915
nvd.nist.gov/vuln/detail/CVE-2009-0217
gitlab.gnome.org/Archive/xmlsec/-/commit/34b349675af9f72eb822837a8772cc1ead7115c7
github.com/advisories/GHSA-8hfm-837h-hjg5
security-tracker.debian.org/tracker/CVE-2009-0217
access.redhat.com/errata/RHSA-2009:1200
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1200.json
cve.org/CVERecord?id=CVE-2009-0217
tools.ietf.org/html/rfc2104
ibm.com/developerworks/java/jdk/alerts
This page doesn't list everything
Left out here: 104 references. The JSON record has them.