{"id":"CVE-2013-2172","aliases":["DEBIAN-CVE-2013-2172","DLA-85-1","DSA-3065-1","EUVD-2022-5065","GHSA-r237-w2w6-jq3p","MGASA-2014-0002","RHSA-2013:1207","RHSA-2013:1208","RHSA-2013:1217","RHSA-2013:1219","UBUNTU-CVE-2013-2172"],"status":"published","title":"Inefficient Algorithmic Complexity in Apache Santuario XML Security","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0593,"percentile":0.93308,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310","CWE-407"],"published":"2013-08-20T00:00:00Z","modified":"2026-09-01T20:03:16Z","fixes":[{"ecosystem":"Maven","package":"org.apache.santuario:xmlsec","fixed_in":["1.4.8","1.5.5"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"libxml-security-java","fixed_in":["1.5.5-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libxml-security-java","fixed_in":["1.5.5-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libxml-security-java","fixed_in":["1.5.5-2"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"libxml-security-java","fixed_in":["1.4.3-2+deb6u1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"libxml-security-java","fixed_in":["1.4.5-1+deb7u1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"xml-security","fixed_in":["1.5.5-1.mga3"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"xml-security","fixed_in":["0:1.5.1-3_patch01.ep5.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"xml-security","fixed_in":["0:1.5.1-3_patch01.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"xml-security","fixed_in":["0:1.5.1-3_patch01.ep5.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"xml-security","fixed_in":["0:1.5.1-3_patch01.ep5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"xml-security","fixed_in":["0:1.5.1-3_patch01.ep5.el6"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.0"},{"fixed":"1.4.8"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"fixed":"1.5.5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-2"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2+deb6u1"}]}],"versions":["1.4.3-2"]},{"source":"osv","ecosystem":"Debian:7","package":"libxml-security-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-1+deb7u1"}]}],"versions":["1.4.5-1"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.0"},{"fixed":"1.4.8"}]}],"versions":["1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","1.4.5","1.4.6","1.4.7"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.santuario:xmlsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"fixed":"1.5.5"}]}],"versions":["1.5.0","1.5.1","1.5.2","1.5.3","1.5.4"]},{"source":"osv","ecosystem":"Mageia:3","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.mga3"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-12.redhat_3.2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-commons-daemon-jsvc-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-2.redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-commons-daemon-jsvc-eap6-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-2.redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-8.redhat_7.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-cxf-xjc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"cxf-xjc-boolean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"cxf-xjc-dv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"cxf-xjc-ts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hibernate4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-11.SP1_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hibernate4-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-11.SP1_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hibernate4-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-11.SP1_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hibernate4-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-11.SP1_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hibernate4-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-11.SP1_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hornetq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-2.Final_redhat_2.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hornetq-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hornetq-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-spec-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.GA_redhat_6.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-aesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.7-2.redhat_2.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-client-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-clustering","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-cmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-2.Final_redhat_2.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-controller-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-deployment-repository","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-deployment-scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-domain-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-domain-management","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ee-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ejb3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-host-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jsr77","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-management-client-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-modcluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-platform-mbean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-pojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-process-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-sar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-system-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-transactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-webservices","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-weld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-xts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.23-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-hal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.7-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-invocation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-jsp-api_2.2_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-6.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.18-2.GA_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-remote-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-security-negotiation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-2.Final_redhat_2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-stdio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.GA_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-bundles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-6.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-domain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-hornetq-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-2.Final_redhat_10.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-modules-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-9.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-product-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-standalone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-6.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-welcome-content-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.17.7-4.Final_redhat_4.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.2-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossws-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.4-7.Final_redhat_7.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jcip-annotations-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.redhat_4.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.10-1.Final_redhat_2.2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.Final_redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-25.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.6-3.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"opensaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.redhat_2.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"openws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-10.redhat_4.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"picketbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.17-3.SP2_redhat_2.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.6.3-2.Final_redhat_2.2.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.10-1.redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.redhat_1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-commons-beanutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3-12.redhat_3.2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-commons-daemon-jsvc-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-2.redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-commons-daemon-jsvc-eap6-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.15-2.redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.8-8.redhat_7.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-cxf-xjc-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"cxf-xjc-boolean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"cxf-xjc-dv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"cxf-xjc-ts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.0-2.redhat_4.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hibernate4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-7.SP1_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hibernate4-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-7.SP1_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hibernate4-entitymanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-7.SP1_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hibernate4-envers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-7.SP1_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hibernate4-infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-7.SP1_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hornetq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-2.Final_redhat_2.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hornetq-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hornetq-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"infinispan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"infinispan-cachestore-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"infinispan-cachestore-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"infinispan-client-hotrod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"infinispan-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-spec-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.19-1.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jaxbintros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-16.GA_redhat_6.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-aesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.33.7-2.redhat_2.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-client-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-clustering","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-cmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-2.Final_redhat_2.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-controller-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-deployment-repository","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-deployment-scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-domain-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-domain-management","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ee-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ejb3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-host-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jsr77","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-management-client-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-modcluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-platform-mbean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-pojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-process-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-sar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-system-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-transactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-webservices","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-weld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-xts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.23-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-hal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.7-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-invocation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-jsp-api_2.2_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-6.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.18-1.GA_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-remote-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.7-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-security-negotiation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.5-2.Final_redhat_2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-stdio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.GA_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-bundles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-6.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-domain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-hornetq-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.5-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-2.Final_redhat_10.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-modules-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-9.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-product-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-standalone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-6.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-welcome-content-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.1-5.Final_redhat_10.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.17.7-4.Final_redhat_4.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.2-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossws-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.4-7.Final_redhat_7.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossws-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jcip-annotations-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-4.redhat_4.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.10-1.Final_redhat_2.2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-1.Final_redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.2.22-25.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.6-2.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"opensaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.1-2.redhat_2.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"openws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-10.redhat_4.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"picketbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.17-3.SP2_redhat_2.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"picketlink-federation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.6.3-2.Final_redhat_2.2.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.10-1.redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.redhat_1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-3_patch01.ep5.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-3_patch01.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-3_patch01.ep5.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-3_patch01.ep5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-3_patch01.ep5.el6"}]}]}],"products":[{"vendor":"apache","product":"santuario_xml_security_for_java"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-1219.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://secunia.com/advisories/54019","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2014-0012.html","tags":["x_refsource_CONFIRM","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1218.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://santuario.apache.org/secadv.data/CVE-2013-2172.txt.asc","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1209.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2028-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1217.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1437.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://svn.apache.org/viewvc/santuario/xml-security-java/branches/1.5.x-fixes/src/main/java/org/apache/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java?r1=1353876\u0026r2=1493772\u0026pathrev=1493772\u0026diff_format=h","tags":["x_refsource_MISC","x_transferred","Patch","fix","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1207.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1375.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0212.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1853.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Dec/23","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1208.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-1220.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"http://www.securityfocus.com/bid/60846","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.osvdb.org/94651","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.debian.org/security/2014/dsa-3065","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2172","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E","tags":["web"]},{"url":"https://web.archive.org/web/20160317145515/http://www.securityfocus.com/archive/1/534161/100/0/threaded","tags":["web"]},{"url":"https://web.archive.org/web/20200228060314/http://www.securityfocus.com/bid/60846","tags":["web"]},{"url":"https://github.com/apache/santuario-java/commit/25e0e11493b061749f778030036cb5c406b34590","tags":["web"]},{"url":"https://github.com/apache/santuario-java/commit/8e8f8bf92a43608d7d5f9e357fae19244454a61f","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r237-w2w6-jq3p"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-2172","tags":["advisory"]},{"url":"https://github.com/apache/santuario-java","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2014-0002.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11664","tags":["report"]},{"url":"http://www.ubuntu.com/usn/usn-2028-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1207","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/site/documentation/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=915883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=915884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=948106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=983549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=999263","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1207.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-3499","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-3499","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3499","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4558","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1862","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1921","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2172","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2172","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-4112","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-4112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4112","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-6495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1066794","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6495","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6495","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1208","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=990686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=995563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996313","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1208.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1217","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1217.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:1219","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1219.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-2172","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2028-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2013-08-20T22:00:00Z","modified":"2024-08-06T15:27:41.14Z","updated_at":"2026-11-02T14:34:56.19172Z"}],"euvd":[{"id":"EUVD-2022-5065","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2013-08-20T22:00:00Z","modified":"2024-08-06T15:27:41Z","updated_at":"2026-11-03T01:56:39.164386Z"}],"ghsa":[{"id":"GHSA-r237-w2w6-jq3p","title":"Inefficient Algorithmic Complexity in Apache Santuario XML Security","description":"`jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2022-05-13T01:05:56Z","modified":"2024-03-05T18:21:59Z","cwes":["CWE-407"],"updated_at":"2026-11-02T14:37:39.730152Z"}],"nvd":[{"id":"CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2013-08-20T22:55:04.093Z","modified":"2026-06-16T23:52:52.877Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:35.248411Z"}],"osv":[{"id":"CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2013-08-20T22:55:04Z","modified":"2026-04-16T06:23:12.965955665Z","updated_at":"2026-11-02T15:43:59.09154Z"},{"id":"DEBIAN-CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2013-08-20T22:55:04.093Z","modified":"2026-09-01T20:03:16.044886849Z","updated_at":"2026-11-02T15:45:25.514579Z"},{"id":"DLA-85-1","title":"libxml-security-java - security update","status":"published","published":"2014-11-09T00:00:00Z","modified":"2026-03-09T02:09:24.248475Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3065-1","title":"libxml-security-java - security update","status":"published","published":"2014-11-06T00:00:00Z","modified":"2026-03-09T01:19:30.906739Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"GHSA-r237-w2w6-jq3p","title":"Inefficient Algorithmic Complexity in Apache Santuario XML Security","description":"`jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"published","published":"2022-05-13T01:05:56Z","modified":"2024-12-03T06:12:10.531072Z","cwes":["CWE-407"],"updated_at":"2026-11-02T15:46:55.122811Z"},{"id":"MGASA-2014-0002","title":"Updated xml-security package fixes security vulnerability","description":"James Forshaw discovered that Apache XML Security for Java incorrectly\nvalidated CanonicalizationMethod parameters. An attacker could use this\nflaw to spoof XML signatures (CVE-2013-2172).\n","status":"published","published":"2014-01-06T00:52:37Z","modified":"2026-04-16T06:23:00.494932772Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"RHSA-2013:1207","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.1 update","status":"published","published":"2024-09-15T20:55:24Z","modified":"2026-08-05T10:02:17Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1208","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.1.1 update","status":"published","published":"2024-09-15T20:55:31Z","modified":"2026-08-05T10:02:17Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1217","title":"Red Hat Security Advisory: xml-security security update","status":"published","published":"2024-09-15T20:49:58Z","modified":"2026-05-15T10:46:21.332293Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:1219","title":"Red Hat Security Advisory: xml-security security update","status":"published","published":"2024-09-15T20:50:08Z","modified":"2026-05-15T10:45:16.067544Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"UBUNTU-CVE-2013-2172","description":"jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak \"canonicalization algorithm to apply to the SignedInfo part of the Signature.\"","status":"withdrawn","published":"2013-08-20T00:00:00Z","modified":"2026-02-04T02:55:31.84136Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}