CVE-2017-5645
Deserialization of Untrusted Data in Log4j
9.8 CriticalPublic exploitFix available
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
89.4%Up 10.3 points since Apr 14, 2021
What each source reports
NVD Score used
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
CVE-2017-5645- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-502
- Updated
- 2026-11-02
CVE List No score
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
CVE-2017-5645- Updated
- 2026-11-02
EUVDEUVD-2020-0263 No score
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
EUVD-2020-0263- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fxph-q3j8-mv87
Deserialization of Untrusted Data in Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
GHSA-fxph-q3j8-mv87- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSV
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
CVE-2017-5645- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVDEBIAN-CVE-2017-5645
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
DEBIAN-CVE-2017-5645- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 15 moreShow less
OSVGHSA-fxph-q3j8-mv87
Deserialization of Untrusted Data in Log4j
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
GHSA-fxph-q3j8-mv87- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVRHSA-2017:1417
Red Hat Security Advisory: rh-java-common-log4j security update
- Record
RHSA-2017:1417- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:1801
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1.0 Service Pack 1 security update
- Record
RHSA-2017:1801- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2423
Red Hat Security Advisory: log4j security update
- Record
RHSA-2017:2423- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2635
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 6
- Record
RHSA-2017:2635- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2636
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 7
- Record
RHSA-2017:2636- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2637
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 5
- Record
RHSA-2017:2637- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2638
Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update
- Record
RHSA-2017:2638- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2808
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2017:2808- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2809
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update
- Record
RHSA-2017:2809- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:2811
Red Hat Security Advisory: eap7-jboss-ec2-eap security update
- Record
RHSA-2017:2811- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2017:3399
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2 security update
- Record
RHSA-2017:3399- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-5645
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
- Record
UBUNTU-CVE-2017-5645- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1794156169 No score
TuxCare security update for org.apache.logging.log4j (1 CVE)
TuxCare rebuilt 2 org.apache.logging.log4j packages to address 1 CVE. Fixed in 2.7-tuxcare.4.
- Record
CLSA-2026-1794156169- Updated
- 2026-11-08
OSVopenSUSE-SU-2024:11026-1 No score
log4j12-1.2.17-3.9 on GA media
These are all security issues fixed in the log4j12-1.2.17-3.9 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11026-1- Updated
- 2026-11-02
Affected products
- apache log4j
- apache software foundation log4j
- netapp oncommand api services
- netapp oncommand insight
- netapp oncommand workflow automation
- netapp service level manager
- netapp snapcenter
- netapp storage automation store
- oracle api gateway
- oracle application testing suite
- oracle autovue vuelink integration
- oracle banking platform
Show 68 moreShow less
- oracle bi publisher
- oracle communications converged application server - service controller
- oracle communications instant messaging server
- oracle communications interactive session recorder
- oracle communications messaging server
- oracle communications network integrity
- oracle communications online mediation controller
- oracle communications pricing design center
- oracle communications service broker
- oracle communications webrtc session controller
- oracle configuration manager
- oracle endeca information discovery studio
- oracle enterprise data quality
- oracle enterprise manager base platform
- oracle enterprise manager for fusion middleware
- oracle enterprise manager for mysql database
- oracle enterprise manager for oracle database
- oracle enterprise manager for peoplesoft
- oracle financial services analytical applications infrastructure
- oracle financial services behavior detection platform
- oracle financial services hedge management and ifrs valuations
- oracle financial services lending and leasing
- oracle financial services loan loss forecasting and provisioning
- oracle financial services profitability management
- oracle financial services regulatory reporting with agilereporter
- oracle flexcube investor servicing
- oracle fusion middleware mapviewer
- oracle goldengate
- oracle goldengate application adapters
- oracle identity analytics
- oracle identity management suite
- oracle identity manager connector
- oracle in-memory performance-driven planning
- oracle instantis enterprisetrack
- oracle insurance calculation engine
- oracle insurance policy administration
- oracle insurance rules palette
- oracle jd edwards enterpriseone tools
- oracle jdeveloper
- oracle mysql enterprise monitor
- oracle peoplesoft enterprise fin install
- oracle policy automation
- oracle policy automation connector for siebel
- oracle policy automation for mobile devices
- oracle primavera gateway
- oracle rapid planning
- oracle retail advanced inventory planning
- oracle retail clearance optimization engine
- oracle retail extract transform and load
- oracle retail integration bus
- oracle retail open commerce platform
- oracle retail predictive application server
- oracle retail service backbone
- oracle siebel ui framework
- oracle soa suite
- oracle tape library acsls
- oracle timesten in-memory database
- oracle utilities advanced spatial and operational analytics
- oracle utilities work and asset management
- oracle weblogic server
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat enterprise linux server
- redhat enterprise linux server aus
- redhat enterprise linux server eus
- redhat enterprise linux server tus
- redhat enterprise linux workstation
- redhat fuse
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.apache.logging.log4j:log4jMaven |
2.0 up to 2.8.2 | 2.8.2 |
org.apache.logging.log4j:log4j-coreMaven |
2.0 up to 2.8.2 | 2.8.2 |
org.apache.logging.log4j:log4jTuxCare:Maven |
2.7 up to 2.7-tuxcare.4, plus listed versions 2.7-tuxcare.12.7-tuxcare.22.7-tuxcare.3 |
2.7-tuxcare.4 |
org.apache.logging.log4j:log4j-coreTuxCare:Maven |
2.7 up to 2.7-tuxcare.4, plus listed versions 2.7-tuxcare.12.7-tuxcare.22.7-tuxcare.3 |
2.7-tuxcare.4 |
apache-log4j2Debian:12 |
before 2.7-2 | 2.7-2 |
apache-log4j2Debian:13 |
before 2.7-2 | 2.7-2 |
apache-log4j2Debian:14 |
before 2.7-2 | 2.7-2 |
org.apache.logging.log4j:log4jMaven |
2.0 up to 2.8.2, plus listed versions 2.0.12.0.22.12.22.3 Show 11 moreShow less2.3.12.3.22.42.4.12.52.62.6.12.6.22.72.82.8.1 |
2.8.2 |
org.apache.logging.log4j:log4j-coreMaven |
2.0 up to 2.8.2, plus listed versions 2.0.12.0.22.12.22.3 Show 11 moreShow less2.3.12.3.22.42.4.12.52.62.6.12.6.22.72.82.8.1 |
2.8.2 |
rh-java-common-log4jRed Hat:rhel_software_collections:2::el6 |
before 0:1.2.17-15.15.el6 | 0:1.2.17-15.15.el6 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rh-java-common-log4j-javadocRed Hat:rhel_software_collections:2::el6 |
before 0:1.2.17-15.15.el6 | 0:1.2.17-15.15.el6 |
rh-java-common-log4j-manualRed Hat:rhel_software_collections:2::el6 |
before 0:1.2.17-15.15.el6 | 0:1.2.17-15.15.el6 |
rh-java-common-log4jRed Hat:rhel_software_collections:2::el7 |
before 0:1.2.17-15.15.el7 | 0:1.2.17-15.15.el7 |
rh-java-common-log4j-javadocRed Hat:rhel_software_collections:2::el7 |
before 0:1.2.17-15.15.el7 | 0:1.2.17-15.15.el7 |
rh-java-common-log4j-manualRed Hat:rhel_software_collections:2::el7 |
before 0:1.2.17-15.15.el7 | 0:1.2.17-15.15.el7 |
log4j-eap6Red Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:1.2.16-12.redhat_3.1.ep6.el6 | 0:1.2.16-12.redhat_3.1.ep6.el6 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:1.2.8-10.redhat_10.ep7.el6 | 0:1.2.8-10.redhat_10.ep7.el6 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:1.2.8-10.redhat_10.ep7.el6 | 0:1.2.8-10.redhat_10.ep7.el6 |
tomcat7Red Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-admin-webappsRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-docs-webappRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-el-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-javadocRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-jsp-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-jsvcRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-libRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-log4jRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-selinuxRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-servlet-3.0-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat7-webappsRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el6 | 0:7.0.70-22.ep7.el6 |
tomcat8Red Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-admin-webappsRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-docs-webappRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-el-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-javadocRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-jsp-2.3-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-jsvcRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-libRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-log4jRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-selinuxRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-servlet-3.1-apiRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
tomcat8-webappsRed Hat:jboss_enterprise_web_server:3.1::el6 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el6 | 0:8.0.36-24.ep7.el6 |
log4j-eap6Red Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:1.2.16-12.redhat_3.1.ep6.el7 | 0:1.2.16-12.redhat_3.1.ep6.el7 |
tomcat-nativeRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:1.2.8-10.redhat_10.ep7.el7 | 0:1.2.8-10.redhat_10.ep7.el7 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:1.2.8-10.redhat_10.ep7.el7 | 0:1.2.8-10.redhat_10.ep7.el7 |
tomcat7Red Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-admin-webappsRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-docs-webappRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-el-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-javadocRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-jsp-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-jsvcRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-libRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-log4jRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-selinuxRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-servlet-3.0-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat7-webappsRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:7.0.70-22.ep7.el7 | 0:7.0.70-22.ep7.el7 |
tomcat8Red Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-admin-webappsRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-docs-webappRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-el-2.2-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-javadocRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-jsp-2.3-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-jsvcRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-libRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-log4jRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-selinuxRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-servlet-3.1-apiRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
tomcat8-webappsRed Hat:jboss_enterprise_web_server:3.1::el7 From an advisory covering 9 CVEs |
before 0:8.0.36-24.ep7.el7 | 0:8.0.36-24.ep7.el7 |
log4jRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-javadocRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-manualRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4jRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-javadocRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-manualRed Hat:enterprise_linux:7::computenode From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4jRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-javadocRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-manualRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4jRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-javadocRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
log4j-manualRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:1.2.17-16.el7_4 | 0:1.2.17-16.el7_4 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:2.7.18-7.SP6_redhat_1.1.ep6.el6 | 0:2.7.18-7.SP6_redhat_1.1.ep6.el6 |
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el6 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el6 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el6 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el6 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el6 | 0:1.9.9-11.redhat_5.1.ep6.el6 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el6 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el6 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el6 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el6 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el6 | 0:4.2.27-1.Final_redhat_1.1.ep6.el6 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:2.3.25-22.SP20_redhat_1.1.ep6.el6 | 0:2.3.25-22.SP20_redhat_1.1.ep6.el6 |
infinispanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el6 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el6 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el6 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el6 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
infinispan-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el6 | 0:5.2.22-1.Final_redhat_1.1.ep6.el6 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jboss-marshallingRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.4.10-3.SP3_redhat_1.1.ep6.el6 | 0:1.4.10-3.SP3_redhat_1.1.ep6.el6 |
jboss-metadataRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-metadata-earRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-metadata-webRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el6 | 0:7.2.3-1.Final_redhat_1.1.ep6.el6 |
jboss-modulesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.3.10-1.Final_redhat_1.1.ep6.el6 | 0:1.3.10-1.Final_redhat_1.1.ep6.el6 |
jboss-remoting3Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:3.3.10-1.Final_redhat_1.1.ep6.el6 | 0:3.3.10-1.Final_redhat_1.1.ep6.el6 |
jboss-vfs2Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:3.2.12-1.Final_redhat_1.1.ep6.el6 | 0:3.2.12-1.Final_redhat_1.1.ep6.el6 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-4.Final_redhat_4.1.ep6.el6 | 0:7.5.17-4.Final_redhat_4.1.ep6.el6 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-1.Final_redhat_4.1.ep6.el6 | 0:7.5.17-1.Final_redhat_4.1.ep6.el6 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el6 | 0:7.5.17-2.Final_redhat_4.1.ep6.el6 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:7.5.24-1.Final_redhat_1.1.ep6.el6 | 0:7.5.24-1.Final_redhat_1.1.ep6.el6 |
log4j-eap6Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.2.16-12.redhat_3.1.ep6.el6 | 0:1.2.16-12.redhat_3.1.ep6.el6 |
log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:1.1.4-1.Final_redhat_1.1.ep6.el6 | 0:1.1.4-1.Final_redhat_1.1.ep6.el6 |
picketlink-bindingsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:2.5.4-17.SP15_redhat_1.1.ep6.el6 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el6 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs |
before 0:2.5.4-17.SP15_redhat_1.1.ep6.el6 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el6 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:2.7.18-7.SP6_redhat_1.1.ep6.el7 | 0:2.7.18-7.SP6_redhat_1.1.ep6.el7 |
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el7 | 0:1.9.9-11.redhat_5.1.ep6.el7 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el7 | 0:1.9.9-11.redhat_5.1.ep6.el7 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el7 | 0:1.9.9-11.redhat_5.1.ep6.el7 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el7 | 0:1.9.9-11.redhat_5.1.ep6.el7 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el7 | 0:1.9.9-11.redhat_5.1.ep6.el7 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el7 | 0:4.2.27-1.Final_redhat_1.1.ep6.el7 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el7 | 0:4.2.27-1.Final_redhat_1.1.ep6.el7 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el7 | 0:4.2.27-1.Final_redhat_1.1.ep6.el7 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el7 | 0:4.2.27-1.Final_redhat_1.1.ep6.el7 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el7 | 0:4.2.27-1.Final_redhat_1.1.ep6.el7 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:2.3.25-22.SP20_redhat_1.1.ep6.el7 | 0:2.3.25-22.SP20_redhat_1.1.ep6.el7 |
infinispanRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el7 | 0:5.2.22-1.Final_redhat_1.1.ep6.el7 |
infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el7 | 0:5.2.22-1.Final_redhat_1.1.ep6.el7 |
infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el7 | 0:5.2.22-1.Final_redhat_1.1.ep6.el7 |
infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el7 | 0:5.2.22-1.Final_redhat_1.1.ep6.el7 |
infinispan-coreRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el7 | 0:5.2.22-1.Final_redhat_1.1.ep6.el7 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-deployment-scannerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-domain-httpRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-domain-managementRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-eeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-ee-deploymentRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-ejb3Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-embeddedRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-host-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jacorbRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jaxrRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jaxrsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jdrRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jmxRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jpaRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jsfRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-jsr77Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-loggingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-mailRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-management-client-contentRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-messagingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-modclusterRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-namingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-networkRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-osgiRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-osgi-configadminRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-osgi-serviceRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-picketlinkRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-platform-mbeanRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-pojoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-process-controllerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-protocolRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-remotingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-sarRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-securityRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-serverRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-system-jmxRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-threadsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-transactionsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-versionRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-webRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-webservicesRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-weldRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-as-xtsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jboss-marshallingRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.4.10-3.SP3_redhat_1.1.ep6.el7 | 0:1.4.10-3.SP3_redhat_1.1.ep6.el7 |
jboss-metadataRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-metadata-earRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-metadata-webRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.2.3-1.Final_redhat_1.1.ep6.el7 | 0:7.2.3-1.Final_redhat_1.1.ep6.el7 |
jboss-modulesRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.3.10-1.Final_redhat_1.1.ep6.el7 | 0:1.3.10-1.Final_redhat_1.1.ep6.el7 |
jboss-remoting3Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:3.3.10-1.Final_redhat_1.1.ep6.el7 | 0:3.3.10-1.Final_redhat_1.1.ep6.el7 |
jboss-vfs2Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:3.2.12-1.Final_redhat_1.1.ep6.el7 | 0:3.2.12-1.Final_redhat_1.1.ep6.el7 |
jbossas-appclientRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-bundlesRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-coreRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-domainRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-javadocsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-4.Final_redhat_4.1.ep6.el7 | 0:7.5.17-4.Final_redhat_4.1.ep6.el7 |
jbossas-modules-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-1.Final_redhat_4.1.ep6.el7 | 0:7.5.17-1.Final_redhat_4.1.ep6.el7 |
jbossas-product-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-standaloneRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbossas-welcome-content-eapRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el7 | 0:7.5.17-2.Final_redhat_4.1.ep6.el7 |
jbosswebRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:7.5.24-1.Final_redhat_1.1.ep6.el7 | 0:7.5.24-1.Final_redhat_1.1.ep6.el7 |
log4j-eap6Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.2.16-12.redhat_3.1.ep6.el7 | 0:1.2.16-12.redhat_3.1.ep6.el7 |
log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:1.1.4-1.Final_redhat_1.1.ep6.el7 | 0:1.1.4-1.Final_redhat_1.1.ep6.el7 |
picketlink-bindingsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:2.5.4-17.SP15_redhat_1.1.ep6.el7 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el7 |
picketlink-federationRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs |
before 0:2.5.4-17.SP15_redhat_1.1.ep6.el7 | 0:2.5.4-17.SP15_redhat_1.1.ep6.el7 |
apache-cxfRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:2.7.18-7.SP6_redhat_1.1.ep6.el5 | 0:2.7.18-7.SP6_redhat_1.1.ep6.el5 |
codehaus-jacksonRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el5 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
codehaus-jackson-core-aslRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el5 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
codehaus-jackson-jaxrsRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el5 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
codehaus-jackson-mapper-aslRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el5 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
codehaus-jackson-xcRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:1.9.9-11.redhat_5.1.ep6.el5 | 0:1.9.9-11.redhat_5.1.ep6.el5 |
hibernate4-core-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el5 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
hibernate4-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el5 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
hibernate4-entitymanager-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el5 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
hibernate4-envers-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el5 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
hibernate4-infinispan-eap6Red Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:4.2.27-1.Final_redhat_1.1.ep6.el5 | 0:4.2.27-1.Final_redhat_1.1.ep6.el5 |
hornetqRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:2.3.25-22.SP20_redhat_1.1.ep6.el5 | 0:2.3.25-22.SP20_redhat_1.1.ep6.el5 |
infinispanRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el5 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el5 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el5 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el5 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
infinispan-coreRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:5.2.22-1.Final_redhat_1.1.ep6.el5 | 0:5.2.22-1.Final_redhat_1.1.ep6.el5 |
jboss-as-appclientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-cliRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-client-allRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-clusteringRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-cmpRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-configadminRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-connectorRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-controllerRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-controller-clientRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-core-securityRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
jboss-as-deployment-repositoryRed Hat:jboss_enterprise_application_platform:6::el5 From an advisory covering 3 CVEs |
before 0:7.5.17-2.Final_redhat_4.1.ep6.el5 | 0:7.5.17-2.Final_redhat_4.1.ep6.el5 |
apache-log4j2Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.2-12.4-12.4-22.4-2ubuntu0.1~esm1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | pimps/CVE-2017-5645 | 2017-08-04 |
| PoC in GitHub | HynekPetrak/log4shell-finder | 2021-12-14 |
| Nuclei | Apache Log4j Server - Deserialization Command Execution |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases | OSV | |
| affected, exploits, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, Nuclei, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5645 is a critical vulnerability (CVSS 9.8) in Apache Log4j, published April 17, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 89.4%, the 99th percentile. Fixed in org.apache.logging.log4j:log4j 2.8.2.
References
access.redhat.com/errata/RHSA-2017:2888
securityfocus.com/bid/97702
securitytracker.com/id/1041294
Show 194 moreShow less
lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E
openwall.com/lists/oss-security/2019/12/19/2
oracle.com/security-alerts/cpuapr2020.html
security.netapp.com/advisory/ntap-20181107-0002
issues.apache.org/jira/browse/LOG4J2-1863
nvd.nist.gov/vuln/detail/CVE-2017-5645
github.com/advisories/GHSA-fxph-q3j8-mv87
security-tracker.debian.org/tracker/CVE-2017-5645
bugzilla.redhat.com/show_bug.cgi?id=1443635
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1417.json
cve.org/CVERecord?id=CVE-2017-5645
issues.redhat.com/browse/JWS-657
openssl.org/news/secadv/20160922.txt
security.360.cn/cve/CVE-2016-8610
tomcat.apache.org/security-7.html
ubuntu.com/security/CVE-2017-5645
git-wip-us.apache.org/repos/asf?p=logging-log4j2.git;h=5dcc192
suse.com/security/cve/CVE-2017-5645
This page doesn't list everything
Left out here: 143 package rows and 18 references. The JSON record has them.