Every CVE Search/ Get API key

CVE-2016-2141

Improper Input Validation in JGroups

9.8 CriticalFix available

CVE-2016-2141 is a critical vulnerability (CVSS 9.8) in Redhat Jgroups, published June 30, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.70%, the 91st percentile. Fixed in org.jgroups:jgroups 3.6.10.Final.

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

4.70%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
CVE-2016-2141
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
CVE-2016-2141
Updated
2026-11-02
EUVDEUVD-2022-5146 No score

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
EUVD-2022-5146
Updated
2026-11-03
GitHub AdvisoriesGHSA-rc7h-x6cq-988q 9.8

Improper Input Validation in JGroups

JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. Fixes for this issue have been backported to versions 3.6.10.Final and 3.2.16.Final.

Record
GHSA-rc7h-x6cq-988q
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSV 9.8

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
CVE-2016-2141
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-2141 9.8

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
DEBIAN-CVE-2016-2141
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 8 moreShow less
OSVGHSA-rc7h-x6cq-988q 9.8

Improper Input Validation in JGroups

JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, which allows remote attackers to bypass security restrictions and send and receive messages within the cluster via unspecified vectors. Fixes for this issue have been backported to versions 3.6.10.Final and 3.2.16.Final.

Record
GHSA-rc7h-x6cq-988q
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVRHSA-2016:1328 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2 security update

Record
RHSA-2016:1328
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:1330 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4 security update

Record
RHSA-2016:1330
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:1332 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.0 security update

Record
RHSA-2016:1332
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:1432 9.8

Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

Record
RHSA-2016:1432
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:1433 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.9 update

Record
RHSA-2016:1433
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2016:1434 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform update

Record
RHSA-2016:1434
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-2141 9.8

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

Record
UBUNTU-CVE-2016-2141
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.jgroups:jgroups
Maven
 3.3.0.Alpha1 up to 3.6.10.Final
3.6.10.Final
org.jgroups:jgroups
Maven
 before 3.2.16.Final
3.2.16.Final
libjgroups-java
Debian:12
 All versions, plus listed versions
2.12.2.Final-52.12.2.Final-6
 None known
libjgroups-java
Debian:13
 All versions, plus listed versions
2.12.2.Final-6
 None known
libjgroups-java
Debian:14
 All versions, plus listed versions
2.12.2.Final-6
 None known
org.jgroups:jgroups
Maven
 3.3.0.Alpha1 up to 3.6.10.Final, plus listed versions
3.3.0.Alpha23.3.0.Beta13.3.0.Beta23.3.0.Beta33.3.0.CR1
Show 45 moreShow less
3.3.0.CR23.3.0.Final3.3.1.Final3.3.2.Final3.3.3.Final3.3.4.Final3.3.5.Final3.3.6.Final3.4.0.Alpha13.4.0.Alpha23.4.0.Alpha33.4.0.Beta13.4.0.Final3.4.1.Final3.4.2.Final3.4.3.Final3.4.4.Final3.4.5.Final3.4.6.Final3.4.7.Final3.4.8.Final3.5.0.Alpha13.5.0.Beta13.5.0.Beta23.5.0.Beta33.5.0.Beta43.5.0.Beta53.5.0.Beta63.5.0.Beta73.5.0.Beta83.5.0.Beta93.5.0.CR13.5.0.CR23.5.0.Final3.5.1.Final3.6.0.Final3.6.1.Final3.6.2.Final3.6.3.Final3.6.43.6.4.Final3.6.5.Final3.6.6.Final3.6.7.Final3.6.8.Final
3.6.10.Final
org.jgroups:jgroups
Maven
 before 3.2.16.Final, plus listed versions
2.10.0.CR12.10.0.GA2.10.1.GA2.11.0.Alpha12.11.0.Alpha2
Show 45 moreShow less
2.11.0.Alpha32.11.0.Alpha42.11.0.Beta12.11.0.Beta22.11.0.GA2.11.1.Final2.12.0.Alpha12.12.0.Alpha22.12.0.Beta12.12.0.CR12.12.0.CR22.12.0.CR32.12.0.CR42.12.0.CR52.12.0.CR62.12.0.Final2.12.1.1.Final2.12.1.2.Final2.12.1.3.Final2.12.1.Final2.12.2.Final2.12.3.Final2.6.17.GA2.6.20.Final2.6.21.Final2.6.22.Final3.0.0.Beta13.0.0.CR13.0.0.CR33.0.0.CR43.0.0.CR53.0.0.Final3.0.1.Final3.0.10.Final3.0.11.Final3.0.12.Final3.0.13.Final3.0.14.Final3.0.16.Final3.0.2.Final3.0.3.Final3.0.4.Final3.0.5.Final3.0.6.Final3.0.7.Final
3.2.16.Final
jgroups
Red Hat:jboss_enterprise_application_platform:5::el4
 before 1:2.6.22-2.ep5.el4
1:2.6.22-2.ep5.el4
jgroups
Red Hat:jboss_enterprise_application_platform:5::el5
 before 1:2.6.22-2.ep5.el5
1:2.6.22-2.ep5.el5
jgroups
Red Hat:jboss_enterprise_application_platform:5::el6
 before 1:2.6.22-2.ep5.el6
1:2.6.22-2.ep5.el6
Show 163 moreShow less
Affected packages
PackageAffectedFixed
jgroups
Red Hat:jboss_enterprise_application_platform:6::el5
 before 1:3.2.16-1.Final_redhat_1.1.ep6.el5
1:3.2.16-1.Final_redhat_1.1.ep6.el5
jgroups
Red Hat:jboss_enterprise_application_platform:6::el6
 before 1:3.2.16-1.Final_redhat_1.1.ep6.el6
1:3.2.16-1.Final_redhat_1.1.ep6.el6
jgroups
Red Hat:jboss_enterprise_application_platform:6::el7
 before 1:3.2.16-1.Final_redhat_1.1.ep6.el7
1:3.2.16-1.Final_redhat_1.1.ep6.el7
eap7-jgroups
Red Hat:jboss_enterprise_application_platform:7::el6
 before 0:3.6.8-3.Final_redhat_3.1.ep7.el6
0:3.6.8-3.Final_redhat_3.1.ep7.el6
eap7-jgroups
Red Hat:jboss_enterprise_application_platform:7::el7
 before 0:3.6.8-3.Final_redhat_3.1.ep7.el7
0:3.6.8-3.Final_redhat_3.1.ep7.el7
jboss-ec2-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.ep6.el6
0:7.5.9-2.Final_redhat_2.ep6.el6
jboss-ec2-eap-samples
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.ep6.el6
0:7.5.9-2.Final_redhat_2.ep6.el6
apache-cxf
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.7.18-2.SP1_redhat_1.1.ep6.el6
0:2.7.18-2.SP1_redhat_1.1.ep6.el6
glassfish-jsf-eap6
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.1.28-11.SP10_redhat_1.1.ep6.el6
0:2.1.28-11.SP10_redhat_1.1.ep6.el6
hibernate4-validator
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:4.3.3-1.Final_redhat_1.1.ep6.el6
0:4.3.3-1.Final_redhat_1.1.ep6.el6
hornetq
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.3.25-13.SP11_redhat_1.1.ep6.el6
0:2.3.25-13.SP11_redhat_1.1.ep6.el6
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jboss-jsf-api_2.1_spec
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.1.28-6.SP2_redhat_1.1.ep6.el6
0:2.1.28-6.SP2_redhat_1.1.ep6.el6
jboss-msc
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:1.1.6-1.Final_redhat_1.1.ep6.el6
0:1.1.6-1.Final_redhat_1.1.ep6.el6
jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el6
0:7.5.9-2.Final_redhat_2.1.ep6.el6
jbossts
Red Hat:jboss_enterprise_application_platform:6::el6
 before 1:4.17.34-1.Final_redhat_1.1.ep6.el6
1:4.17.34-1.Final_redhat_1.1.ep6.el6
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:7.5.17-1.Final_redhat_1.1.ep6.el6
0:7.5.17-1.Final_redhat_1.1.ep6.el6
picketlink-bindings
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.5.4-11.SP9_redhat_2.1.ep6.el6
0:2.5.4-11.SP9_redhat_2.1.ep6.el6
picketlink-federation
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.5.4-11.SP9_redhat_2.1.ep6.el6
0:2.5.4-11.SP9_redhat_2.1.ep6.el6
xalan-j2-eap6
Red Hat:jboss_enterprise_application_platform:6::el6
 before 0:2.7.1-11.redhat_11.1.ep6.el6
0:2.7.1-11.redhat_11.1.ep6.el6
apache-cxf
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.7.18-2.SP1_redhat_1.1.ep6.el7
0:2.7.18-2.SP1_redhat_1.1.ep6.el7
glassfish-jsf-eap6
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.1.28-11.SP10_redhat_1.1.ep6.el7
0:2.1.28-11.SP10_redhat_1.1.ep6.el7
hibernate4-validator
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:4.3.3-1.Final_redhat_1.1.ep6.el7
0:4.3.3-1.Final_redhat_1.1.ep6.el7
hornetq
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.3.25-13.SP11_redhat_1.1.ep6.el7
0:2.3.25-13.SP11_redhat_1.1.ep6.el7
jboss-as-appclient
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-cli
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-client-all
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-clustering
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-cmp
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-configadmin
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-connector
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-controller
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-controller-client
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-core-security
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-deployment-repository
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-deployment-scanner
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-domain-http
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-domain-management
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-ee
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-ee-deployment
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-ejb3
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-embedded
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-host-controller
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jacorb
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jaxr
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jaxrs
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jdr
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jmx
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jpa
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jsf
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-jsr77
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-logging
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-mail
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-management-client-content
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-messaging
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-modcluster
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-naming
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-network
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-osgi
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-osgi-configadmin
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-osgi-service
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-picketlink
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-platform-mbean
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-pojo
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-process-controller
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-protocol
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-remoting
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-sar
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-security
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-server
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-system-jmx
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-threads
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-transactions
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-version
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-web
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-webservices
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-weld
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-as-xts
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jboss-jsf-api_2.1_spec
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.1.28-6.SP2_redhat_1.1.ep6.el7
0:2.1.28-6.SP2_redhat_1.1.ep6.el7
jboss-msc
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:1.1.6-1.Final_redhat_1.1.ep6.el7
0:1.1.6-1.Final_redhat_1.1.ep6.el7
jbossas-appclient
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-bundles
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-core
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-domain
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-javadocs
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-modules-eap
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-product-eap
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-standalone
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossas-welcome-content-eap
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.9-2.Final_redhat_2.1.ep6.el7
0:7.5.9-2.Final_redhat_2.1.ep6.el7
jbossts
Red Hat:jboss_enterprise_application_platform:6::el7
 before 1:4.17.34-1.Final_redhat_1.1.ep6.el7
1:4.17.34-1.Final_redhat_1.1.ep6.el7
jbossweb
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:7.5.17-1.Final_redhat_1.1.ep6.el7
0:7.5.17-1.Final_redhat_1.1.ep6.el7
picketlink-bindings
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.5.4-11.SP9_redhat_2.1.ep6.el7
0:2.5.4-11.SP9_redhat_2.1.ep6.el7
picketlink-federation
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.5.4-11.SP9_redhat_2.1.ep6.el7
0:2.5.4-11.SP9_redhat_2.1.ep6.el7
xalan-j2-eap6
Red Hat:jboss_enterprise_application_platform:6::el7
 before 0:2.7.1-11.redhat_11.1.ep6.el7
0:2.7.1-11.redhat_11.1.ep6.el7
libjgroups-java
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.12.2.Final-4
 None known
libjgroups-java
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.12.2.Final-42.12.2.Final-5
 None known
libjgroups-java
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.12.2.Final-5
 None known
libjgroups-java
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.12.2.Final-5
 None known
libjgroups-java
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.12.2.Final-5
 None known
libjgroups-java
Ubuntu:25.10
 All versions, plus listed versions
2.12.2.Final-6
 None known
libjgroups-java
Ubuntu:26.10
 All versions, plus listed versions
2.12.2.Final-6
 None known
libjgroups-java
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.12.2.Final-6
 None known

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 66 moreShow less
This page doesn't list everything

Left out here: 29 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open