CVE-2014-9970
Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt
7.5 HighFix available
CVE-2014-9970 is a high vulnerability (CVSS 7.5) in Jasypt Project Jasypt, published May 21, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. Fixed in org.jasypt:jasypt 1.9.2.
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
2.37%Up 0.8 points since Feb 4, 2022
What each source reports
NVD Score used
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
CVE-2014-9970- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
CVE-2014-9970- Updated
- 2026-11-02
EUVDEUVD-2022-5095 No score
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
EUVD-2022-5095- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5c2-rxh2-f5h2
Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
GHSA-r5c2-rxh2-f5h2- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSV
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
CVE-2014-9970- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-9970
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
DEBIAN-CVE-2014-9970- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVGHSA-r5c2-rxh2-f5h2
Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
GHSA-r5c2-rxh2-f5h2- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVRHSA-2017:2808
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2017:2808- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2809
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2017:2809- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2811
Red Hat Security Advisory: eap7-jboss-ec2-eap security update
- Record
RHSA-2017:2811- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2904
Red Hat Security Advisory: rh-sso7-keycloak security update
- Record
RHSA-2017:2904- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:2905
Red Hat Security Advisory: rh-sso7-keycloak security update
- Record
RHSA-2017:2905- CVSS 3.0
- 5.4 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVRHSA-2017:3141
Red Hat Security Advisory: rhvm-appliance security, bug fix, and enhancement update
- Record
RHSA-2017:3141- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-9970
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
- Record
UBUNTU-CVE-2014-9970- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jasypt:jasyptMaven |
before 1.9.2 | 1.9.2 |
jasyptDebian:12 |
before 1.9.2-1 | 1.9.2-1 |
jasyptDebian:13 |
before 1.9.2-1 | 1.9.2-1 |
jasyptDebian:14 |
before 1.9.2-1 | 1.9.2-1 |
org.jasypt:jasyptMaven |
before 1.9.2, plus listed versions 1.01.11.21.31.3.1 Show 9 moreShow less1.41.4.11.51.61.71.7.11.81.9.01.9.1 |
1.9.2 |
eap7-artemis-nativeRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.1.0-13.redhat_4.ep7.el7 | 0:1.1.0-13.redhat_4.ep7.el7 |
eap7-artemis-native-wildflyRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.1.0-13.redhat_4.ep7.el7 | 0:1.1.0-13.redhat_4.ep7.el7 |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.56.0-3.redhat_2.2.ep7.el7 | 0:1.56.0-3.redhat_2.2.ep7.el7 |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.56.0-3.redhat_2.2.ep7.el7 | 0:1.56.0-3.redhat_2.2.ep7.el7 |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.56.0-3.redhat_2.2.ep7.el7 | 0:1.56.0-3.redhat_2.2.ep7.el7 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.56.0-3.redhat_2.2.ep7.el7 | 0:1.56.0-3.redhat_2.2.ep7.el7 |
eap7-hibernate-validatorRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.2.5-2.Final_redhat_2.1.ep7.el7 | 0:5.2.5-2.Final_redhat_2.1.ep7.el7 |
eap7-hibernate-validator-cdiRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:5.2.5-2.Final_redhat_2.1.ep7.el7 | 0:5.2.5-2.Final_redhat_2.1.ep7.el7 |
eap7-jasyptRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.9.2-2.redhat_1.1.ep7.el7 | 0:1.9.2-2.redhat_1.1.ep7.el7 |
eap7-jboss-jms-api_2.0_specRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.0.1-2.Final_redhat_1.1.ep7.el7 | 0:1.0.1-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.0.7-2.Final_redhat_1.1.ep7.el7 | 0:2.0.7-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el7 | 0:10.0.2-2.Final_redhat_1.1.ep7.el7 |
eap7-jboss-remote-namingRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el7 | 0:2.0.5-1.Final_redhat_1.1.ep7.el7 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:4.0.24-1.Final_redhat_1.1.ep7.el7 | 0:4.0.24-1.Final_redhat_1.1.ep7.el7 |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.1.4-2.Final_redhat_1.1.ep7.el7 | 0:1.1.4-2.Final_redhat_1.1.ep7.el7 |
eap7-picketlink-apiRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-bindingsRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-commonRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-configRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-federationRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-apiRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-implRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-idm-simple-schemaRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-implRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-picketlink-wildfly8Red Hat:jboss_enterprise_application_platform:7::el7 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el7 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:1.3.31-1.Final_redhat_1.1.ep7.el7 | 0:1.3.31-1.Final_redhat_1.1.ep7.el7 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:7.0.8-4.GA_redhat_1.1.ep7.el7 | 0:7.0.8-4.GA_redhat_1.1.ep7.el7 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:7.0.8-1.GA_redhat_1.1.ep7.el7 | 0:7.0.8-1.GA_redhat_1.1.ep7.el7 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:7.0.8-4.GA_redhat_1.1.ep7.el7 | 0:7.0.8-4.GA_redhat_1.1.ep7.el7 |
eap7-artemis-nativeRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.1.0-13.redhat_4.ep7.el6 | 0:1.1.0-13.redhat_4.ep7.el6 |
eap7-artemis-native-wildflyRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.1.0-13.redhat_4.ep7.el6 | 0:1.1.0-13.redhat_4.ep7.el6 |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.56.0-3.redhat_2.2.ep7.el6 | 0:1.56.0-3.redhat_2.2.ep7.el6 |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.56.0-3.redhat_2.2.ep7.el6 | 0:1.56.0-3.redhat_2.2.ep7.el6 |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.56.0-3.redhat_2.2.ep7.el6 | 0:1.56.0-3.redhat_2.2.ep7.el6 |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.56.0-3.redhat_2.2.ep7.el6 | 0:1.56.0-3.redhat_2.2.ep7.el6 |
eap7-hibernate-validatorRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.2.5-2.Final_redhat_2.1.ep7.el6 | 0:5.2.5-2.Final_redhat_2.1.ep7.el6 |
eap7-hibernate-validator-cdiRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:5.2.5-2.Final_redhat_2.1.ep7.el6 | 0:5.2.5-2.Final_redhat_2.1.ep7.el6 |
eap7-jasyptRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.9.2-2.redhat_1.1.ep7.el6 | 0:1.9.2-2.redhat_1.1.ep7.el6 |
eap7-jboss-jms-api_2.0_specRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.0.1-2.Final_redhat_1.1.ep7.el6 | 0:1.0.1-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.0.7-2.Final_redhat_1.1.ep7.el6 | 0:2.0.7-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:10.0.2-2.Final_redhat_1.1.ep7.el6 | 0:10.0.2-2.Final_redhat_1.1.ep7.el6 |
eap7-jboss-remote-namingRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.0.5-1.Final_redhat_1.1.ep7.el6 | 0:2.0.5-1.Final_redhat_1.1.ep7.el6 |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:4.0.24-1.Final_redhat_1.1.ep7.el6 | 0:4.0.24-1.Final_redhat_1.1.ep7.el6 |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.1.4-2.Final_redhat_1.1.ep7.el6 | 0:1.1.4-2.Final_redhat_1.1.ep7.el6 |
eap7-picketlink-apiRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-bindingsRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-commonRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-configRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-federationRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-apiRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-implRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-idm-simple-schemaRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-implRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-picketlink-wildfly8Red Hat:jboss_enterprise_application_platform:7::el6 |
before 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 | 0:2.5.5-9.SP8_redhat_1.1.ep7.el6 |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:1.3.31-1.Final_redhat_1.1.ep7.el6 | 0:1.3.31-1.Final_redhat_1.1.ep7.el6 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:7.0.8-4.GA_redhat_1.1.ep7.el6 | 0:7.0.8-4.GA_redhat_1.1.ep7.el6 |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:7.0.8-1.GA_redhat_1.1.ep7.el6 | 0:7.0.8-1.GA_redhat_1.1.ep7.el6 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:7.0.8-4.GA_redhat_1.1.ep7.el6 | 0:7.0.8-4.GA_redhat_1.1.ep7.el6 |
eap7-jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:7.0.8-1.GA_redhat_1.ep7.el6 | 0:7.0.8-1.GA_redhat_1.ep7.el6 |
eap7-jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:7::el6 |
before 0:7.0.8-1.GA_redhat_1.ep7.el6 | 0:7.0.8-1.GA_redhat_1.ep7.el6 |
eap7-jboss-ec2-eapRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:7.0.8-1.GA_redhat_1.ep7.el7 | 0:7.0.8-1.GA_redhat_1.ep7.el7 |
eap7-jboss-ec2-eap-samplesRed Hat:jboss_enterprise_application_platform:7::el7 |
before 0:7.0.8-1.GA_redhat_1.ep7.el7 | 0:7.0.8-1.GA_redhat_1.ep7.el7 |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7::el6 |
before 0:2.5.14-1.Final_redhat_1.1.jbcs.el6 | 0:2.5.14-1.Final_redhat_1.1.jbcs.el6 |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7::el6 |
before 0:2.5.14-1.Final_redhat_1.1.jbcs.el6 | 0:2.5.14-1.Final_redhat_1.1.jbcs.el6 |
rh-sso7-keycloakRed Hat:red_hat_single_sign_on:7::el7 |
before 0:2.5.14-1.Final_redhat_1.1.jbcs.el7 | 0:2.5.14-1.Final_redhat_1.1.jbcs.el7 |
rh-sso7-keycloak-serverRed Hat:red_hat_single_sign_on:7::el7 |
before 0:2.5.14-1.Final_redhat_1.1.jbcs.el7 | 0:2.5.14-1.Final_redhat_1.1.jbcs.el7 |
rhvm-applianceRed Hat:enterprise_linux:7::hypervisor |
before 1:4.1.20171102.0-1.el7 | 1:4.1.20171102.0-1.el7 |
jasyptUbuntu:16.04:LTS |
All versions, plus listed versions 1.8-3 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securitytracker.com/id/1040360
access.redhat.com/errata/RHSA-2017:2809
Show 70 moreShow less
sourceforge.net/p/jasypt/code/668
nvd.nist.gov/vuln/detail/CVE-2014-9970
github.com/advisories/GHSA-r5c2-rxh2-f5h2
security-tracker.debian.org/tracker/CVE-2014-9970
bugzilla.redhat.com/show_bug.cgi?id=1410481
issues.redhat.com/browse/JBEAP-11485
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2808.json
cve.org/CVERecord?id=CVE-2014-9970
ubuntu.com/security/CVE-2014-9970