{"id":"CVE-2010-4172","aliases":["EUVD-2022-3524","GHSA-c78g-qwpw-2jgv","RHSA-2011:0791","RHSA-2011:0897"],"status":"published","title":"Improper Neutralization of Input During Web Page Generation  in Apache Tomcat","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.42009,"percentile":0.98701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-79"],"published":"2010-11-26T19:00:00Z","modified":"2026-08-05T10:01:30Z","exploits":[{"source":"exploitdb","id":"EDB-35011","title":"Apache Tomcat 7.0.4 - 'sort' / 'orderBy' Cross-Site Scripting","type":"remote","platform":"linux","date":"2010-11-22","verified":true,"url":"https://www.exploit-db.com/exploits/35011"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.tomcat:tomcat","fixed_in":["7.0.5"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.5"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.12"},{"last_affected":"6.0.29"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.5"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.apache.tomcat:tomcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.12"},{"last_affected":"6.0.29"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-el-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-el-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-el-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-el-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.24-33.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.7-7.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"bcel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2-8.1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"cglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-5.1.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-11.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"ecj","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.1.1-3.2.2.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"glassfish-jaf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-6.1.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"glassfish-javamail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-0.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_13-2.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.5.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.3.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.3.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-commons-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-commons-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-ejb-persistence-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-ejb-persistence-3.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.3.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-entitymanager-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.3.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.5.GA_CP04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-apr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-apr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-apr-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-apr-util-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"httpd22-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.1.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-chain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-2.2.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-9.1.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-collections-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-daemon-jsvc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-dbcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-dbcp-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-digester","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-8.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-19.2.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-fileupload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-7.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-1.1.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-1.3.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-launcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-4.6.1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-0.4.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-10.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-logging-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-0.4.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-modeler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0-4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-pool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-11.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-pool-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-11.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-commons-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.5.1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-oro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-3.3.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jakarta-taglibs-standard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-9.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0-1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-common-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-common-logging-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-common-logging-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-javaee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-javaee-poms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-jms-1.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jboss-transaction-1.0.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jcommon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"jfreechart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.13-2.3.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.14-18.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-jbossweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_cluster-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.GA_CP01.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_jk-ap20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mod_ssl22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.17-14.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"mx4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.1-9.3.4.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1-5.3.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"regexp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5-1.2.1.jdk6.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"struts12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-3.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat-jkstatus-ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-2.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.20-2.0.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.20-2.0.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-common-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-jasper-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-jasper-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-jsp-2.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-jsp-2.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-server-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-servlet-2.4-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-servlet-2.4-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat5-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-14_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-el-1.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15_patch_03.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-5.3_patch_04.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-3.patch01.1.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xml-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.04-7.12.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xml-commons-jaxp-1.2-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.04-7.12.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xml-commons-jaxp-1.3-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.04-7.12.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el4","package":"xml-commons-resolver12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.04-7.12.ep5.el4"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-bcel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-bsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-oro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-regexp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-apache-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-commons-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-javamail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-jdepend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-jmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-jsch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-nodeps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-scripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-swing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ant-trax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-13.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.7-7.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"cglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-5.1.1.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-11.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"ecj3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.1.1-3.1.1.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_13-3.1.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.4.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.2.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.2.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-commons-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-commons-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-ejb-persistence-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-ejb-persistence-3.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.3.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-entitymanager-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.3.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.4.GA_CP04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-4.1.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-chain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-2.2.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-9.2.1.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-collections-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.4.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-dbcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.4.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-dbcp-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.4.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-digester","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-8.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-fileupload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-7.4.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-1.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-1.3.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-0.4.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-10.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-logging-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-0.4.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-pool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-11.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-pool-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-11.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-commons-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.5.2.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-oro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-3.3.2.1.1.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jakarta-taglibs-standard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-9.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0-1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-common-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-common-logging-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-common-logging-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-javaee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-javaee-poms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-jms-1.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jboss-transaction-1.0.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jcommon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"jfreechart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.13-2.3.2.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster-jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster-jbossweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_cluster-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.GA_CP01.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_jk-ap20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.17-11.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"objectweb-asm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1-5.3.1.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"struts12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-3.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat-jkstatus-ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-2.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.20-2.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-common-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-jasper-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-jasper-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-jsp-2.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-jsp-2.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-server-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-servlet-2.4-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-servlet-2.4-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat5-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-16_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-el-1.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-15.1_patch_03.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-5.3_patch_04.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-3.patch01.1.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xml-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.10.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xml-commons-jaxp-1.2-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.10.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xml-commons-jaxp-1.3-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.10.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el5","package":"xml-commons-resolver12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.10.jdk6.ep5.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-bcel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-bsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-oro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-regexp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-apache-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-commons-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-commons-net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-javamail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-jdepend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-jmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-jsch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-nodeps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-scripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-swing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ant-trax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.7-7.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"cglib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2-5.4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"dom4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.1-11.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"ecj3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.1.1-4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2_13-3.1.4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.8.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.5.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-3.5.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-commons-annotations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-commons-annotations-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.0-1.8.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-ejb-persistence-3.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.3.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-ejb-persistence-3.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-3.3.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.4.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-entitymanager-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.0-4.4.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"hibernate3-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.3.2-1.8.GA_CP04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-11.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-9.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-chain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2-2.2.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-12.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-collections","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-collections-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-daemon-jsvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.5-1.4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-dbcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-dbcp-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-16.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-digester","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-8.1.1.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-fileupload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1-7.5.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-1.2.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-io","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-4.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-logging-jboss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-10.2.2.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-logging-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-pool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-15.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-pool-tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-15.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-commons-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-7.5.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-oro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.8-7.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jakarta-taglibs-standard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-12.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"javassist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0-3.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-common-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-common-logging-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-common-logging-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-javaee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-javaee-poms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-jms-1.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jboss-transaction-1.0.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-2.9.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jcommon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.16-1.2.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"jfreechart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.13-2.3.2.1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.2.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.2.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster-jbossas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.2.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster-jbossweb2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.2.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.1.1.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_cluster-tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.10-2.2.GA_CP01.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_jk-ap20","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-1.1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.17-11.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"objectweb-asm31","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1-12.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"struts12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.9-3.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat-jkstatus-ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.31-2.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.20-2.1.2.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-common-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-jasper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-jasper-eclipse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-jasper-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-jsp-2.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-jsp-2.0-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-server-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-servlet-2.4-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-servlet-2.4-api-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat5-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.5.33-15_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-admin-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-docs-webapp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-el-1.0-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-jsp-2.1-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-log4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-servlet-2.5-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"tomcat6-webapps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.32-14_patch_03.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-5.3_patch_04.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.1-8.patch01.1.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-jaxp-1.1-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-jaxp-1.2-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-jaxp-1.3-apis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-resolver10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-resolver11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-resolver12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-which10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_server:1::el6","package":"xml-commons-which11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.04-7.14.ep5.el6"}]}],"bundled":8}],"products":[{"vendor":"apache","product":"tomcat"}],"references":[{"url":"http://www.ubuntu.com/usn/USN-1048-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://secunia.com/advisories/42337","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1037778","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/514866/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/45022","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/63422","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://tomcat.apache.org/security-7.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=656246","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"http://www.vupen.com/english/advisories/2010/3047","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2010-11/0285.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0897.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://tomcat.apache.org/security-6.html","tags":["x_refsource_CONFIRM","x_transferred","article"]},{"url":"http://secunia.com/advisories/57126","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0791.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2011/0203","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securitytracker.com/id?1024764","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0896.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://support.apple.com/kb/HT5002","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/43019","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://svn.apache.org/viewvc?view=revision\u0026revision=1037779","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/45015","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4172","tags":["advisory"]},{"url":"https://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","tags":["web"]},{"url":"https://marc.info/?l=bugtraq\u0026m=139344343412337\u0026w=2","tags":["web"]},{"url":"https://www.redhat.com/support/errata/RHSA-2011-0896.html","tags":["web"]},{"url":"https://www.redhat.com/support/errata/RHSA-2011-0897.html","tags":["web"]},{"url":"https://www.securityfocus.com/archive/1/514866/100/0/threaded","tags":["web"]},{"url":"https://www.ubuntu.com/usn/USN-1048-1","tags":["web"]},{"url":"https://www.vupen.com/english/advisories/2010/3047","tags":["web"]},{"url":"https://www.vupen.com/english/advisories/2011/0203","tags":["web"]},{"url":"https://github.com/apache/tomcat/commit/5971f9392edc6d70808b2599b062b050fcd11d23","tags":["web"]},{"url":"https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.5","tags":["web"]},{"url":"https://github.com/advisories/GHSA-c78g-qwpw-2jgv"},{"url":"https://github.com/apache/tomcat","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0791","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=636997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=643809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=661244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=675786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=675792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=678671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=695284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=697504","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0791.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3718","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3718","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3718","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-4172","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-4172","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-0013","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0013","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:0897","tags":["advisory"]},{"url":"http://docs.redhat.com/docs/en-US/JBoss_Enterprise_Web_Server/1.0/html-single/Release_Notes_1.0.2/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=585331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=618189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=640281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=677659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703390","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0897.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1157","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1157","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1452","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1452","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-1623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-1623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1623","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-0419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=871685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4557","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2010-4172","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","status":"published","published":"2010-11-26T19:00:00Z","modified":"2024-08-07T03:34:37.407Z","updated_at":"2026-11-02T14:33:28.115387Z"}],"euvd":[{"id":"EUVD-2022-3524","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","status":"published","published":"2010-11-26T19:00:00Z","modified":"2024-08-07T03:34:37Z","updated_at":"2026-11-03T01:39:31.025742Z"}],"ghsa":[{"id":"GHSA-c78g-qwpw-2jgv","title":"Improper Neutralization of Input During Web Page Generation  in Apache Tomcat","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","status":"published","published":"2022-05-14T02:42:46Z","modified":"2024-03-05T19:11:31Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:39.730152Z"}],"nvd":[{"id":"CVE-2010-4172","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","status":"published","published":"2010-11-26T20:00:04.75Z","modified":"2026-06-16T23:24:17.313Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:00.37682Z"}],"osv":[{"id":"GHSA-c78g-qwpw-2jgv","title":"Improper Neutralization of Input During Web Page Generation  in Apache Tomcat","description":"Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.","status":"published","published":"2022-05-14T02:42:46Z","modified":"2024-03-05T19:11:30Z","cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:44.571161Z"},{"id":"RHSA-2011:0791","title":"Red Hat Security Advisory: tomcat6 security and bug fix update","status":"published","published":"2024-09-15T18:59:35Z","modified":"2026-08-05T10:01:29Z","updated_at":"2026-11-02T15:53:01.003286Z"},{"id":"RHSA-2011:0897","title":"Red Hat Security Advisory: JBoss Enterprise Web Server 1.0.2 update","status":"published","published":"2024-09-15T18:59:48Z","modified":"2026-08-05T10:01:30Z","updated_at":"2026-11-02T15:53:01.003286Z"}]}}