Every CVE Search/ Get API key

CVE-2022-46364

Apache CXF SSRF Vulnerability

9.8 CriticalPublic exploitFix available

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.31%Up 1.4 points since Dec 14, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

Record
CVE-2022-46364
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-918
Updated
2026-11-02
CVE List 9.8

Apache CXF SSRF Vulnerability

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

Record
CVE-2022-46364
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-918
Updated
2026-11-02
EUVDEUVD-2022-7768 9.8

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

Record
EUVD-2022-7768
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-x3x3-qwjq-8gj4 9.8

Apache CXF Server-Side Request Forgery vulnerability

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.

Record
GHSA-x3x3-qwjq-8gj4
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-918
Updated
2026-11-02
OSV 9.8

Apache CXF SSRF Vulnerability

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

Record
CVE-2022-46364
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-918
Updated
2026-11-02
OSVGHSA-x3x3-qwjq-8gj4 9.8

Apache CXF Server-Side Request Forgery vulnerability

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.

Record
GHSA-x3x3-qwjq-8gj4
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-918
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2023:0163 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update

Record
RHSA-2023:0163
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0552 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0552
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0553 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0553
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0554 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Record
RHSA-2023:0554
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10207 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update

Record
RHSA-2024:10207
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:10208 9.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update

Record
RHSA-2024:10208
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1776040410 No score

TuxCare security update for org.apache.cxf (6 CVEs)

TuxCare rebuilt 5 org.apache.cxf packages to address 6 CVEs. Fixed in 3.4.5-tuxcare.1.

Record
CLSA-2026-1776040410
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.apache.cxf:cxf-core
Maven
 before 3.4.10
3.4.10
org.apache.cxf:cxf-core
Maven
 3.5.0 up to 3.5.5
3.5.5
org.apache.cxf:cxf-core
TuxCare:Maven
From an advisory covering 6 CVEs
 3.4.5 up to 3.4.5-tuxcare.1
3.4.5-tuxcare.1
org.apache.cxf:cxf-rt-databinding-aegis
TuxCare:Maven
From an advisory covering 6 CVEs
 3.4.5 up to 3.4.5-tuxcare.1
3.4.5-tuxcare.1
org.apache.cxf:cxf-rt-rs-security-jose
TuxCare:Maven
From an advisory covering 6 CVEs
 3.4.5 up to 3.4.5-tuxcare.1
3.4.5-tuxcare.1
org.apache.cxf:cxf-rt-rs-service-description
TuxCare:Maven
From an advisory covering 6 CVEs
 3.4.5 up to 3.4.5-tuxcare.1
3.4.5-tuxcare.1
org.apache.cxf:cxf-rt-transports-jms
TuxCare:Maven
From an advisory covering 6 CVEs
 3.4.5 up to 3.4.5-tuxcare.1
3.4.5-tuxcare.1
org.apache.cxf:cxf-core
Maven
 before 3.4.10, plus listed versions
3.0.03.0.0-milestone13.0.0-milestone23.0.13.0.10
Show 45 moreShow less
3.0.113.0.123.0.133.0.143.0.153.0.163.0.23.0.33.0.43.0.53.0.63.0.73.0.83.0.93.1.03.1.13.1.103.1.113.1.123.1.133.1.143.1.153.1.163.1.173.1.183.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.93.2.03.2.13.2.103.2.113.2.123.2.133.2.143.2.23.2.33.2.43.2.53.2.6
3.4.10
org.apache.cxf:cxf-core
Maven
 3.5.0 up to 3.5.5, plus listed versions
3.5.13.5.23.5.33.5.4
3.5.5
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:3.4.10-1.redhat_00001.1.el7eap
0:3.4.10-1.redhat_00001.1.el7eap
Show 224 moreShow less
Affected packages
PackageAffectedFixed
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:3.4.10-1.redhat_00001.1.el7eap
0:3.4.10-1.redhat_00001.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:3.4.10-1.redhat_00001.1.el7eap
0:3.4.10-1.redhat_00001.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:3.4.10-1.redhat_00001.1.el7eap
0:3.4.10-1.redhat_00001.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:3.4.10-1.redhat_00001.1.el8eap
0:3.4.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:3.4.10-1.redhat_00001.1.el8eap
0:3.4.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:3.4.10-1.redhat_00001.1.el8eap
0:3.4.10-1.redhat_00001.1.el8eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:3.4.10-1.redhat_00001.1.el8eap
0:3.4.10-1.redhat_00001.1.el8eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:3.4.10-1.redhat_00001.1.el9eap
0:3.4.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:3.4.10-1.redhat_00001.1.el9eap
0:3.4.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:3.4.10-1.redhat_00001.1.el9eap
0:3.4.10-1.redhat_00001.1.el9eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:3.4.10-1.redhat_00001.1.el9eap
0:3.4.10-1.redhat_00001.1.el9eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el7eap
0:3.3.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el7eap
0:1.15.16-1.Final_redhat_00001.1.el7eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el7eap
0:1.5.2-1.redhat_00002.1.el7eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el7eap
0:6.4.0-1.redhat_00001.1.el7eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el7eap
0:2.9.2-1.redhat_00001.1.el7eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el7eap
0:5.10.13-3.Final_redhat_00001.1.el7eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el7eap
0:1.5.10-1.Final_redhat_00001.1.el7eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el7eap
0:2.12.7-1.redhat_00003.1.el7eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el7eap
0:1.0.1-3.redhat_00003.1.el7eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el7eap
0:4.0.49-1.Final_redhat_00001.1.el7eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el7eap
0:3.0.0-6.SP07_redhat_00001.1.el7eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el7eap
0:2.0.0-3.Final_redhat_00001.1.el7eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el7eap
0:5.0.27-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el7eap
0:1.10.0-24.Final_redhat_00023.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el7eap
0:2.2.22-1.SP3_redhat_00001.1.el7eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el7eap
0:1.9.3-1.Final_redhat_00001.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el7
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el7eap
0:7.4.9-4.GA_redhat_00003.1.el7eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el8eap
0:3.3.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el8eap
0:1.15.16-1.Final_redhat_00001.1.el8eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el8eap
0:1.5.2-1.redhat_00002.1.el8eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el8eap
0:6.4.0-1.redhat_00001.1.el8eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el8eap
0:2.9.2-1.redhat_00001.1.el8eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el8eap
0:5.10.13-3.Final_redhat_00001.1.el8eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el8eap
0:1.5.10-1.Final_redhat_00001.1.el8eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el8eap
0:2.12.7-1.redhat_00003.1.el8eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el8eap
0:1.0.1-3.redhat_00003.1.el8eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el8eap
0:4.0.49-1.Final_redhat_00001.1.el8eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el8eap
0:3.0.0-6.SP07_redhat_00001.1.el8eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el8eap
0:2.0.0-3.Final_redhat_00001.1.el8eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el8eap
0:5.0.27-1.Final_redhat_00001.1.el8eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el8eap
0:1.10.0-24.Final_redhat_00023.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el8eap
0:2.2.22-1.SP3_redhat_00001.1.el8eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el8eap
0:1.9.3-1.Final_redhat_00001.1.el8eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el8
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el8eap
0:7.4.9-4.GA_redhat_00003.1.el8eap
eap7-hal-console
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.3.16-1.Final_redhat_00001.1.el9eap
0:3.3.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-wildfly-elytron-tool
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.15.16-1.Final_redhat_00001.1.el9eap
0:1.15.16-1.Final_redhat_00001.1.el9eap
eap7-jettison
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.2-1.redhat_00002.1.el9eap
0:1.5.2-1.redhat_00002.1.el9eap
eap7-woodstox-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:6.4.0-1.redhat_00001.1.el9eap
0:6.4.0-1.redhat_00001.1.el9eap
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-apache-sshd
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.9.2-1.redhat_00001.1.el9eap
0:2.9.2-1.redhat_00001.1.el9eap
eap7-elytron-web
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el9eap
0:1.9.3-1.Final_redhat_00001.1.el9eap
eap7-hibernate-search
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jgroups
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-backend-jms
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-engine
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-orm
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-hibernate-search-serialization-avro
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.10.13-3.Final_redhat_00001.1.el9eap
0:5.10.13-3.Final_redhat_00001.1.el9eap
eap7-ironjacamar
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-common-spi
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-api
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-core-impl
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-deployers-common
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-jdbc
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-ironjacamar-validator
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.5.10-1.Final_redhat_00001.1.el9eap
0:1.5.10-1.Final_redhat_00001.1.el9eap
eap7-jackson-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jdk8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-datatype-jsr310
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-json-provider
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-module-jaxb-annotations
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-base
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-java8
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.12.7-1.redhat_00003.1.el9eap
0:2.12.7-1.redhat_00003.1.el9eap
eap7-javaee-security-soteria
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-javaee-security-soteria-enterprise
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.0.1-3.redhat_00003.1.el9eap
0:1.0.1-3.redhat_00003.1.el9eap
eap7-jboss-ejb-client
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:4.0.49-1.Final_redhat_00001.1.el9eap
0:4.0.49-1.Final_redhat_00001.1.el9eap
eap7-jboss-jsf-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:3.0.0-6.SP07_redhat_00001.1.el9eap
0:3.0.0-6.SP07_redhat_00001.1.el9eap
eap7-jboss-jsp-api_2.3_spec
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.0.0-3.Final_redhat_00001.1.el9eap
0:2.0.0-3.Final_redhat_00001.1.el9eap
eap7-jboss-remoting
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:5.0.27-1.Final_redhat_00001.1.el9eap
0:5.0.27-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.10.0-24.Final_redhat_00023.1.el9eap
0:1.10.0-24.Final_redhat_00023.1.el9eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:2.2.22-1.SP3_redhat_00001.1.el9eap
0:2.2.22-1.SP3_redhat_00001.1.el9eap
eap7-undertow-server
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:1.9.3-1.Final_redhat_00001.1.el9eap
0:1.9.3-1.Final_redhat_00001.1.el9eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform:7.4::el9
From an advisory covering 19 CVEs
 before 0:7.4.9-4.GA_redhat_00003.1.el9eap
0:7.4.9-4.GA_redhat_00003.1.el9eap
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
From an advisory covering 31 CVEs
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.4.10-1.SP1_redhat_00001.1.el7eap
0:3.4.10-1.SP1_redhat_00001.1.el7eap
eap7-avro
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.6-8.redhat_00003.1.el7eap
0:1.7.6-8.redhat_00003.1.el7eap
eap7-h2database
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.4.197-3.redhat_00004.1.el7eap
0:1.4.197-3.redhat_00004.1.el7eap
eap7-jboss-annotations-api_1.3_spec
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.1-4.Final_redhat_00001.1.el7eap
0:2.0.1-4.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el7eap
0:2.0.15-1.Final_redhat_00001.1.el7eap
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.el7eap
0:2.0.15-1.Final_redhat_00001.1.el7eap
eap7-jboss-server-migration
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-cli
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-core
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap6.4
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap6.4-to-eap7.3
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.1
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.2-to-eap7.3
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-eap7.3-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly10.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly10.1
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly11.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly12.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly13.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly14.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly15.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly16.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly17.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly18.0-server
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly8.2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-server-migration-wildfly9.0
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.7.2-12.Final_redhat_00013.1.el7eap
0:1.7.2-12.Final_redhat_00013.1.el7eap
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:3.7.13-1.Final_redhat_00001.1.el7eap
0:3.7.13-1.Final_redhat_00001.1.el7eap
eap7-log4j-jboss-logmanager
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:1.2.2-2.Final_redhat_00002.1.el7eap
0:1.2.2-2.Final_redhat_00002.1.el7eap
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk11
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-java-jdk8
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-javadocs
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:7.3.11-4.GA_redhat_00002.1.el7eap
0:7.3.11-4.GA_redhat_00002.1.el7eap
eap7-wss4j
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-bindings
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-policy
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-common
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-dom
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-policy-stax
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-wss4j-ws-security-stax
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.3.3-2.redhat_00001.1.el7eap
0:2.3.3-2.redhat_00001.1.el7eap
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.7.1-38.redhat_00015.1.el7eap
0:2.7.1-38.redhat_00015.1.el7eap
eap7-xml-security
Red Hat:jboss_enterprise_application_platform_eus:7.3::el7
From an advisory covering 14 CVEs
 before 0:2.2.3-2.redhat_00001.1.el7eap
0:2.2.3-2.redhat_00001.1.el7eap
eap7-apache-cxf
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-rt
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-services
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-apache-cxf-tools
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
0:3.1.16-3.SP1_redhat_00001.1.ep7.el7
eap7-avro
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.7.6-2.redhat_00003.1.ep7.el7
0:1.7.6-2.redhat_00003.1.ep7.el7
eap7-bouncycastle
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-mail
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-pkix
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-bouncycastle-prov
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.68.0-1.redhat_00005.1.ep7.el7
0:1.68.0-1.redhat_00005.1.ep7.el7
eap7-h2database
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:1.4.197-2.redhat_00005.1.ep7.el7
0:1.4.197-2.redhat_00005.1.ep7.el7
eap7-jackson-databind
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7
0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7
eap7-jboss-marshalling
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.ep7.el7
0:2.0.15-1.Final_redhat_00001.1.ep7.el7
eap7-jboss-marshalling-river
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.0.15-1.Final_redhat_00001.1.ep7.el7
0:2.0.15-1.Final_redhat_00001.1.ep7.el7
eap7-jboss-xnio-base
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:3.5.10-1.Final_redhat_00001.1.ep7.el7
0:3.5.10-1.Final_redhat_00001.1.ep7.el7
eap7-wildfly
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:7.1.8-2.GA_redhat_00002.1.ep7.el7
0:7.1.8-2.GA_redhat_00002.1.ep7.el7
eap7-wildfly-modules
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:7.1.8-2.GA_redhat_00002.1.ep7.el7
0:7.1.8-2.GA_redhat_00002.1.ep7.el7
eap7-xalan-j2
Red Hat:jboss_enterprise_application_platform_eus:7.1::el7
From an advisory covering 12 CVEs
 before 0:2.7.1-26.redhat_00015.1.ep7.el7
0:2.7.1-26.redhat_00015.1.ep7.el7

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubkasem545/CVE-2022-46364-Poc2026-03-28
PoC in GitHubShashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC2026-03-29
PoC in GitHubcybermaksx/CVE-2022-46364-Proof-of-the-concept2026-03-29
PoC in GitHub0xmid00/CVE-2022-46364-poc2026-03-31
PoC in GitHubjwsly12/CVE-2022-46364-htb-ctf2026-04-03
PoC in GitHubc0gnit00/CVE-2022-463642026-07-07

History

History
RecordedChangedSources
exploitsPoC in GitHub
affected, exploits, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-46364 is a critical vulnerability (CVSS 9.8) in Apache Cxf, published December 13, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.31%, the 83rd percentile. Fixed in org.apache.cxf:cxf-core 3.4.10.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 27 versions and 97 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open