{"id":"CVE-2009-0027","aliases":["EUVD-2009-0039","GHSA-5xfj-v547-vccj","RHSA-2009:0346","RHSA-2009:0347","RHSA-2009:0348","RHSA-2009:0349"],"status":"published","title":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01805,"percentile":0.78708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2009-03-09T21:00:00Z","modified":"2026-06-16T23:04:06Z","fixes":[{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"glassfish-jsf","fixed_in":["0:1.2_10-0jpp.ep1.5.ep5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"hibernate3","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"hibernate3-javadoc","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jacorb","fixed_in":["0:2.3.0-1jpp.ep1.7.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-fileupload","fixed_in":["1:1.1.1-3jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-io","fixed_in":["0:1.1-0.20051005.2jpp_1rh"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-logging-jboss","fixed_in":["0:1.1-4.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-cache","fixed_in":["0:1.4.1-6.SP11.1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-jaxr","fixed_in":["0:1.2.0-SP2.0jpp.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-remoting","fixed_in":["0:2.2.2-3.SP11.0jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-seam","fixed_in":["0:1.2.1-1.ep1.18.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-seam-docs","fixed_in":["0:1.2.1-1.ep1.18.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-vfs","fixed_in":["0:1.0.0-1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas","fixed_in":["0:4.2.0-4.GA_CP06.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas-4.2.0.GA_CP06-bin","fixed_in":["0:4.2.0-4.GA_CP06.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas-client","fixed_in":["0:4.2.0-4.GA_CP06.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossts","fixed_in":["1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossweb","fixed_in":["0:2.0.0-6.CP09.0jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jgroups","fixed_in":["1:2.4.5-2.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"rh-eap-docs","fixed_in":["0:4.2.0-5.GA_CP06.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"rh-eap-docs-examples","fixed_in":["0:4.2.0-5.GA_CP06.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"tanukiwrapper","fixed_in":["0:3.2.1-2jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"tanukiwrapper-debuginfo","fixed_in":["0:3.2.1-2jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"ws-commons-policy","fixed_in":["0:1.0-2jpp.ep1.7.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"ws-scout0","fixed_in":["0:0.7-0.rc2.4.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"xalan-j2","fixed_in":["0:2.7.0-2jpp.ep1.5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jaxb","fixed_in":["0:2.1.4-1.6.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jaxb-javadoc","fixed_in":["0:2.1.4-1.6.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jsf","fixed_in":["0:1.2_10-0jpp.ep1.5.ep5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"hibernate3","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"hibernate3-javadoc","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jacorb","fixed_in":["0:2.3.0-1jpp.ep1.7.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-fileupload","fixed_in":["1:1.1.1-3jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-io","fixed_in":["0:1.1-0.20051005.2jpp_1rh"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-logging-jboss","fixed_in":["0:1.1-4.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-cache","fixed_in":["0:1.4.1-6.SP11.1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-jaxr","fixed_in":["0:1.2.0-SP2.0jpp.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-messaging","fixed_in":["0:1.4.0-2.SP3_CP07.1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-remoting","fixed_in":["0:2.2.2-3.SP11.0jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-seam","fixed_in":["0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-seam-docs","fixed_in":["0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-vfs","fixed_in":["0:1.0.0-1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas","fixed_in":["0:4.3.0-3.GA_CP04.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas-4.3.0.GA_CP04-bin","fixed_in":["0:4.3.0-3.GA_CP04.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas-client","fixed_in":["0:4.3.0-3.GA_CP04.3.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossts","fixed_in":["1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossweb","fixed_in":["0:2.0.0-6.CP09.0jpp.ep1.1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws","fixed_in":["0:2.0.1-3.SP2_CP05.4.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws-common","fixed_in":["0:1.0.0-2.GA_CP03.1.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws-framework","fixed_in":["0:2.0.1-1.GA_CP03.2.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jgroups","fixed_in":["1:2.4.5-2.ep1.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"rh-eap-docs","fixed_in":["0:4.3.0-4.GA_CP04.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"rh-eap-docs-examples","fixed_in":["0:4.3.0-4.GA_CP04.ep1.3.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"tanukiwrapper","fixed_in":["0:3.2.1-2jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"tanukiwrapper-debuginfo","fixed_in":["0:3.2.1-2jpp.ep1.2.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"ws-commons-policy","fixed_in":["0:1.0-2jpp.ep1.7.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"ws-scout0","fixed_in":["0:0.7-0.rc2.4.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"xalan-j2","fixed_in":["0:2.7.0-2jpp.ep1.5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"glassfish-jsf","fixed_in":["0:1.2_10-0jpp.ep1.5.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"hibernate3","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"hibernate3-javadoc","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jacorb","fixed_in":["0:2.3.0-1jpp.ep1.7.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jakarta-commons-logging-jboss","fixed_in":["0:1.1-4.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-cache","fixed_in":["0:1.4.1-6.SP11.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-jaxr","fixed_in":["0:1.2.0-SP2.0jpp.ep1.3.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-remoting","fixed_in":["0:2.2.2-3.SP11.0jpp.ep1.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-seam","fixed_in":["0:1.2.1-1.ep1.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-seam-docs","fixed_in":["0:1.2.1-1.ep1.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-vfs","fixed_in":["0:1.0.0-1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas","fixed_in":["0:4.2.0-4.GA_CP06.3.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas-4.2.0.GA_CP06-bin","fixed_in":["0:4.2.0-4.GA_CP06.3.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas-client","fixed_in":["0:4.2.0-4.GA_CP06.3.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossts","fixed_in":["1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossweb","fixed_in":["0:2.0.0-6.CP09.0jpp.ep1.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossws-jboss42","fixed_in":["0:1.2.1-1.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jgroups","fixed_in":["1:2.4.5-2.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"rh-eap-docs","fixed_in":["0:4.2.0-5.GA_CP06.ep1.3.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"rh-eap-docs-examples","fixed_in":["0:4.2.0-5.GA_CP06.ep1.3.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"tanukiwrapper","fixed_in":["0:3.2.1-2jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"tanukiwrapper-debuginfo","fixed_in":["0:3.2.1-2jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"ws-commons-policy","fixed_in":["0:1.0-2jpp.ep1.7.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"ws-scout0","fixed_in":["0:0.7-0.rc2.4.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jaxb","fixed_in":["0:2.1.4-1.6.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jaxb-javadoc","fixed_in":["0:2.1.4-1.6.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jsf","fixed_in":["0:1.2_10-0jpp.ep1.5.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"hibernate3","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"hibernate3-javadoc","fixed_in":["1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jacorb","fixed_in":["0:2.3.0-1jpp.ep1.7.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jakarta-commons-logging-jboss","fixed_in":["0:1.1-4.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-cache","fixed_in":["0:1.4.1-6.SP11.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-jaxr","fixed_in":["0:1.2.0-SP2.0jpp.ep1.3.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-messaging","fixed_in":["0:1.4.0-2.SP3_CP07.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-remoting","fixed_in":["0:2.2.2-3.SP11.0jpp.ep1.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-seam","fixed_in":["0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-seam-docs","fixed_in":["0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-vfs","fixed_in":["0:1.0.0-1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas","fixed_in":["0:4.3.0-3.GA_CP04.2.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas-4.3.0.GA_CP04-bin","fixed_in":["0:4.3.0-3.GA_CP04.2.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas-client","fixed_in":["0:4.3.0-3.GA_CP04.2.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossts","fixed_in":["1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossweb","fixed_in":["0:2.0.0-6.CP09.0jpp.ep1.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws","fixed_in":["0:2.0.1-3.SP2_CP05.3.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws-common","fixed_in":["0:1.0.0-2.GA_CP03.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws-framework","fixed_in":["0:2.0.1-1.GA_CP03.2.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jgroups","fixed_in":["1:2.4.5-2.1.ep1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"rh-eap-docs","fixed_in":["0:4.3.0-4.GA_CP04.ep1.3.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"rh-eap-docs-examples","fixed_in":["0:4.3.0-4.GA_CP04.ep1.3.1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"tanukiwrapper","fixed_in":["0:3.2.1-2jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"tanukiwrapper-debuginfo","fixed_in":["0:3.2.1-2jpp.ep1.2.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"ws-commons-policy","fixed_in":["0:1.0-2jpp.ep1.7.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"ws-scout0","fixed_in":["0:0.7-0.rc2.4.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_10-0jpp.ep1.5.ep5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1jpp.ep1.7.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-fileupload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-0.20051005.2jpp_1rh"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.SP11.1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-SP2.0jpp.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.SP11.0jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-seam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.ep1.18.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-seam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.ep1.18.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jboss-vfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas-4.2.0.GA_CP06-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossas-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-6.CP09.0jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.5-2.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"rh-eap-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-5.GA_CP06.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"rh-eap-docs-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-5.GA_CP06.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"tanukiwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"tanukiwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"ws-commons-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-2jpp.ep1.7.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"ws-scout0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-0.rc2.4.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el4","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-2jpp.ep1.5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.6.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jaxb-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.6.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_10-0jpp.ep1.5.ep5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1jpp.ep1.7.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-fileupload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-3jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-0.20051005.2jpp_1rh"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.SP11.1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-SP2.0jpp.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.SP3_CP07.1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.SP11.0jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-seam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-seam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.14.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jboss-vfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas-4.3.0.GA_CP04-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossas-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.3.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.3-1.SP5_CP04.1jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-6.CP09.0jpp.ep1.1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.SP2_CP05.4.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.GA_CP03.1.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jbossws-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.GA_CP03.2.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.5-2.ep1.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"rh-eap-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP04.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"rh-eap-docs-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP04.ep1.3.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"tanukiwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"tanukiwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"ws-commons-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-2jpp.ep1.7.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"ws-scout0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-0.rc2.4.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el4","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-2jpp.ep1.5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_10-0jpp.ep1.5.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1jpp.ep1.7.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.SP11.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-SP2.0jpp.ep1.3.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.SP11.0jpp.ep1.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-seam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.ep1.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-seam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.ep1.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jboss-vfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas-4.2.0.GA_CP06-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossas-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-4.GA_CP06.3.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-6.CP09.0jpp.ep1.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jbossws-jboss42","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.5-2.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"rh-eap-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-5.GA_CP06.ep1.3.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"rh-eap-docs-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-5.GA_CP06.ep1.3.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"tanukiwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"tanukiwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"ws-commons-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-2jpp.ep1.7.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.2.0::el5","package":"ws-scout0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-0.rc2.4.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jaxb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.6.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jaxb-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.4-1.6.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_10-0jpp.ep1.5.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.4-1.SP1_CP07.0jpp.ep1.14.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.0-1jpp.ep1.7.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.SP11.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-SP2.0jpp.ep1.3.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-2.SP3_CP07.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.2-3.SP11.0jpp.ep1.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-seam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-seam-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jboss-vfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.2.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas-4.3.0.GA_CP04-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.2.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossas-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-3.GA_CP04.2.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.2.3-1.SP5_CP04.1jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-6.CP09.0jpp.ep1.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.SP2_CP05.3.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-2.GA_CP03.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jbossws-framework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.GA_CP03.2.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.5-2.1.ep1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"rh-eap-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP04.ep1.3.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"rh-eap-docs-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-4.GA_CP04.ep1.3.1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"tanukiwrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"tanukiwrapper-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-2jpp.ep1.2.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"ws-commons-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-2jpp.ep1.7.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:4.3.0::el5","package":"ws-scout0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7-0.rc2.4.el5"}]}]}],"products":[{"vendor":"redhat","product":"jboss_enterprise_application_platform"}],"references":[{"url":"http://secunia.com/advisories/34112","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0346.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch"]},{"url":"https://jira.jboss.org/jira/browse/JBPAPP-1548","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=479668","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.securitytracker.com/id?1021817","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0347.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch"]},{"url":"http://www.securityfocus.com/bid/34023","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0348.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-0349.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0027","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5xfj-v547-vccj"},{"url":"https://access.redhat.com/errata/RHSA-2009:0346","tags":["advisory"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp06/html-single/readme/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474619","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0346.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2009-0027","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0027","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0347","tags":["advisory"]},{"url":"http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp04/html-single/readme/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=474622","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0347.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0348","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475211","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0348.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:0349","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475258","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0349.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2009-0027","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","status":"published","published":"2009-03-09T21:00:00Z","modified":"2024-08-07T04:17:10.514Z","updated_at":"2026-11-02T14:33:26.302774Z"}],"euvd":[{"id":"EUVD-2009-0039","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","status":"published","published":"2009-03-09T21:00:00Z","modified":"2024-08-07T04:17:10Z","updated_at":"2026-11-03T01:39:27.659956Z"}],"ghsa":[{"id":"GHSA-5xfj-v547-vccj","title":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","status":"published","published":"2022-05-02T03:12:27Z","modified":"2023-01-31T05:06:59Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:07.796746Z"}],"nvd":[{"id":"CVE-2009-0027","description":"The request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read arbitrary XML files via a crafted request.","status":"published","published":"2009-03-09T21:30:00.17Z","modified":"2026-06-16T23:04:06.987Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:34.44527Z"}],"osv":[{"id":"RHSA-2009:0346","title":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP06 update","status":"published","published":"2024-09-15T17:38:46Z","modified":"2025-11-22T10:19:58Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:0347","title":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update","status":"published","published":"2024-09-15T17:38:51Z","modified":"2025-11-22T10:19:59Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:0348","title":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP06 update","status":"published","published":"2024-09-15T17:38:55Z","modified":"2025-11-22T10:20:00Z","updated_at":"2026-11-02T15:53:00.468834Z"},{"id":"RHSA-2009:0349","title":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0CP04 update","status":"published","published":"2024-09-15T17:38:59Z","modified":"2025-11-22T10:20:01Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}