{"id":"CVE-2014-3577","aliases":["CLSA-2026-1786536790","CLSA-2026-1791188247","CLSA-2026-1793884176","CLSA-2026-1793886120","CLSA-2026-1793886295","CLSA-2026-1794162677","CLSA-2026-1794162824","DEBIAN-CVE-2014-3577","DLA-222-1","EUVD-2018-0575","GHSA-cfh5-3ghh-wfjx","MGASA-2014-0348","MGASA-2014-0557","RHSA-2014:1082","RHSA-2014:1146","RHSA-2014:1162","RHSA-2014:1166","RHSA-2014:1320","RHSA-2014:1321","RHSA-2014:1833","RHSA-2014:1834","RHSA-2014:2019","RHSA-2015:0158","RHSA-2016:1773","RHSA-2022:0055","SUSE-SU-2020:3149-1","SUSE-SU-2020:3151-1","SUSE-SU-2020:3152-1","UBUNTU-CVE-2014-3577","USN-2769-1","openSUSE-SU-2020:1873-1","openSUSE-SU-2020:1875-1","openSUSE-SU-2024:10621-1"],"status":"published","title":"Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.09189,"percentile":0.95368,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-347"],"published":"2014-08-21T00:00:00Z","modified":"2026-11-09T01:45:03Z","fixes":[{"ecosystem":"Maven","package":"org.apache.httpcomponents:httpclient","fixed_in":["4.3.5"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","fixed_in":["4.2.1-tuxcare.5","4.1.2-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"commons-httpclient","fixed_in":["3.1-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"commons-httpclient","fixed_in":["3.1-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"commons-httpclient","fixed_in":["3.1-11"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"httpcomponents-client","fixed_in":["4.3.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"httpcomponents-client","fixed_in":["4.3.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"httpcomponents-client","fixed_in":["4.3.5-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"thermostat1-httpcomponents-client","fixed_in":["0:4.2.5-3.4.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"thermostat1-httpcomponents-client-javadoc","fixed_in":["0:4.2.5-3.4.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpcomponents-client","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpcomponents-client-javadoc","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpcomponents-client","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpcomponents-client-javadoc","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpcomponents-client","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpcomponents-client-javadoc","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpcomponents-client","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpcomponents-client-javadoc","fixed_in":["0:4.2.5-5.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"jakarta-commons-httpclient","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.0-7jpp.4.el5_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-debuginfo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-0.9.el6_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-demo","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-javadoc","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-manual","fixed_in":["1:3.1-16.el7_0"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"commons-httpclient","fixed_in":["3.1-10.2ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"httpcomponents-client","fixed_in":["4.3.3-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2"},{"fixed":"4.2-tuxcare.2"}]}],"versions":["4.2","4.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.6"},{"fixed":"4.2.6-tuxcare.2"}]}],"versions":["4.2.6","4.2.6-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.2"},{"fixed":"4.2.2-tuxcare.2"}]}],"versions":["4.2.2","4.2.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.5"},{"fixed":"4.2.5-tuxcare.1"}]}],"versions":["4.2.5"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.3"},{"fixed":"4.1.3-tuxcare.1"}]}],"versions":["4.1.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.1"},{"fixed":"4.2.1-tuxcare.5"}]}],"versions":["4.2.1","4.2.1-tuxcare.1","4.2.1-tuxcare.2","4.2.1-tuxcare.3","4.2.1-tuxcare.4"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.2"},{"fixed":"4.1.2-tuxcare.2"}]}],"versions":["4.1.2","4.1.2-tuxcare.1"]},{"source":"osv","ecosystem":"Debian:12","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-9+deb6u1"}]}],"versions":["3.1-9"],"bundled":3},{"source":"osv","ecosystem":"Maven","package":"org.apache.httpcomponents:httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5"}]}],"versions":["4.0","4.0-alpha1","4.0-alpha2","4.0-alpha3","4.0-alpha4","4.0-beta1","4.0-beta2","4.0.1","4.0.2","4.0.3","4.1","4.1-alpha1","4.1-alpha2","4.1-beta1","4.1.1","4.1.2","4.1.3","4.2","4.2-alpha1","4.2-beta1","4.2.1","4.2.2","4.2.3","4.2.4","4.2.5","4.2.6","4.3","4.3-alpha1","4.3-beta1","4.3-beta2","4.3.1","4.3.2","4.3.3","4.3.4"]},{"source":"osv","ecosystem":"Mageia:4","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-11.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.5-1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-3.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"thermostat1-httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-3.4.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:1::el6","package":"thermostat1-httpcomponents-client-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-3.4.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpcomponents-client-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpcomponents-client-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpcomponents-client-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpcomponents-client-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.5-5.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpclient-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpcomponents-client-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpcomponents-core-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpcomponents-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpcomponents-project-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpcore-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"httpmime-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpclient-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpcomponents-client-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpcomponents-core-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpcomponents-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpcomponents-project-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpcore-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"httpmime-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpclient-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpcomponents-client-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpcomponents-core-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpcomponents-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpcomponents-project-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpcore-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"httpmime-eap6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.1-12.redhat_2.1.ep6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0-7jpp.4.el5_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-0.9.el6_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"jakarta-commons-httpclient-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-16.el7_0"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-4_patch_02.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-seam2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-seam2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-seam2-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"jboss-seam2-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-4_patch_02.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-seam2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-seam2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-seam2-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"jboss-seam2-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-4_patch_02.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-seam2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-seam2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-seam2-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"jboss-seam2-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-4_patch_02.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-seam2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-seam2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-seam2-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"jboss-seam2-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jakarta-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1-4_patch_02.el6_5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-seam2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-seam2-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-seam2-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"jboss-seam2-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.6.EAP5-22_patch_01.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el5","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-14.patch_09.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_web_platform:5::el6","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-14.patch_09.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el4","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-14.patch_09.ep5.el4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el5","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-14.patch_09.ep5.el5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:5::el6","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-14.patch_09.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.12-1.SP1_redhat_5.1.ep6.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.16-2.redhat_3.1.ep6.el5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.12-1.SP1_redhat_5.1.ep6.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.16-2.redhat_3.1.ep6.el6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.12-1.SP1_redhat_5.1.ep6.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.16-2.redhat_3.1.ep6.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-extensions-api-impl-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-allinone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-userportal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:3","package":"rhevm-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.0-0.29.el6ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rhc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.38.7.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"activemq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.0-6.redhat.611463.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"activemq-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.0-6.redhat.611463.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-broker-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.6.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-admin-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28.2.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.38.6.4-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-msg-broker-mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36.2.4-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-routing-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.26.6.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-jbosseap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27.4.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"ImageMagick-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.7.2.7-5.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.651.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"libcgroup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.rc1-18.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"libcgroup-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.rc1-18.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"libcgroup-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40.rc1-18.el6_8"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-cron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25.4.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-diy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.31.6.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-jbossews","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.5.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-jenkins-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.1.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-mongodb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.31.3.3-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-nodejs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33.1.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-php","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35.4.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.34.3.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-cartridge-ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.32.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-msg-node-mcollective","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.30.2.2-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-node-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.3.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"openshift-origin-node-util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.38.7.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-frontend-haproxy-sni-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.2.1-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:2.0::el6","package":"rubygem-openshift-origin-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.38.6.4-1.el6op"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.319.2.1643288987-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"coreos-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.0-1.rhaos4.10.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"coreos-installer-bootinfra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.0-1.rhaos4.10.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"coreos-installer-bootinfra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.0-1.rhaos4.10.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"coreos-installer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.0-1.rhaos4.10.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"coreos-installer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.0-1.rhaos4.10.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1643404185-1.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.0-92.rhaos4.10.gitdaab4d1.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.0-92.rhaos4.10.gitdaab4d1.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-9.rhaos4.10.gitbdffb9a.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-9.rhaos4.10.gitbdffb9a.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-9.rhaos4.10.gitbdffb9a.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el7"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202160023.p0.gf93da17.assembly.stream.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.0-202202250816.p0.ge419edf.assembly.stream.el8"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-11.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.2ubuntu0.14.04.1"}]}],"versions":["3.1-10.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"httpcomponents-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.3-1ubuntu0.1"}]}],"versions":["4.2.5-2","4.3.2-1","4.3.3-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.2ubuntu0.14.04.1"}]}],"versions":["3.1-10.2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-lp151.4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-lp152.6.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-httpclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-13.4"}]}],"bundled":2}],"products":[{"vendor":"apache","product":"httpasyncclient"},{"vendor":"apache","product":"httpclient"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2014-1891.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0765.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://access.redhat.com/solutions/1165533","tags":["x_transferred","Third Party Advisory","advisory","web","article"]},{"url":"http://www.osvdb.org/110143","tags":["vdb-entry","x_transferred","Broken Link","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_transferred","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0675.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://secunia.com/advisories/60713","tags":["third-party-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/127913/Apache-HttpComponents-Man-In-The-Middle.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","advisory","evidence","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0720.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1166.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1888.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1833.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0850.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0158.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1834.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://secunia.com/advisories/60466","tags":["third-party-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0125.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1176.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1931.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1146.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1177.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securityfocus.com/bid/69258","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1892.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0851.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1835.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.securitytracker.com/id/1030812","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05363782","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2769-1","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://secunia.com/advisories/60589","tags":["third-party-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2014-1836.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95327","tags":["vdb-entry","x_transferred","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2014/Aug/48","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","advisory","article","evidence","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1773.html","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E","tags":["mailing-list","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2021/10/06/1","tags":["mailing-list","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0003/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3577","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cfh5-3ghh-wfjx","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E","tags":["web"]},{"url":"https://github.com/apache/httpcomponents-client/commit/51cc67567765d67f878f0dcef61b5ded454d3122","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20231027-0003","tags":["web"]},{"url":"https://svn.apache.org/viewvc?view=revision\u0026revision=1614064","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3577","tags":["advisory"]},{"url":"https://github.com/apache/httpcomponents-client","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2014-0348.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13932","tags":["report"]},{"url":"http://mail-archives.apache.org/mod_mbox/www-announce/201408.mbox/CVE-2014-3577","tags":["advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2014-1082.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2014-0557.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14363","tags":["report"]},{"url":"http://cxf.apache.org/security-advisories.data/CVE-2014-3584.txt.asc","tags":["advisory"]},{"url":"http://cxf.apache.org/security-advisories.data/CVE-2014-3577.txt.asc","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129074","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1082","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1082.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3577","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1146","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1146.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1162","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129916","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1162.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6153","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1166","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1166.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1320","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1320.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1321","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1321.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1833","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1833.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:1834","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1834.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2014:2019","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157304","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_2019.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-3623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3623","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:0158","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.5/html/Manager_Release_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=570191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=879077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=890517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=902298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=906938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=912057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=918138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=922377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=928727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=947965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=955235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=961753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=962880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=967466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=977306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=987299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=988422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=989546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=996512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=999975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1001419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1003785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1007133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1008512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1013670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1014326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1015186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1016916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1022795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1025831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1028387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1029934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1032686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1034885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1038632","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1040952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1043808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1044042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1048019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1052348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1053884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1059435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1061156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1064544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1065753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1067162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1070823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1071217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1076705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1077284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1079583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1080144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1081896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1082681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1083998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1084611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1085380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1087917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1091692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1092884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1093786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096662","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1096971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1097622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1098791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1100810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1101565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1102018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1103976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1104233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1109721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1110636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1111551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1114554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1115966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1116486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1118879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1119922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1120858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1121454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123396","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1123754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1125834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1126839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1128949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1129634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1130076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1131693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1132191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1133938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1134009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1136087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1139866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1140430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1141693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1142233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1148623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1149235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1153544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1154630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1156577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1157211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1160889","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0158.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0151","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-0154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-0154","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0154","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1773","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1196783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1217403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1274852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1279330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1282852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1311950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1335422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1358938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1361307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362666","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1773.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7501","tags":["report"]},{"url":"https://access.redhat.com/solutions/2045023","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7501","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7501","tags":["advisory"]},{"url":"http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0788","tags":["advisory"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-02-24","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0789","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0789","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0790","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0791","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0791","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-0792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-0792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0792","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3721","tags":["advisory"]},{"url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3722","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3722","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3722","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3723","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3723","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3723","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3724","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3724","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3724","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3725","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3726","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3726","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3726","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3727","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3727","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3727","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0055","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2030806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051730","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0055.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20319","tags":["advisory"]},{"url":"https://github.com/coreos/coreos-installer/security/advisories/GHSA-3r3g-g73x-g593","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21684","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-10-06/#SECURITY-2499","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020322","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21685","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21686","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21687","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21687","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21688","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21688","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020335","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21689","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21690","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21690","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21691","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020339","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020342","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21694","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21694","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21695","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21695","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020344","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21696","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21696","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2423","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020345","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21697","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21697","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020385","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21698","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2506","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41190","tags":["advisory"]},{"url":"https://github.com/moby/moby/security/advisories/GHSA-xmmx-7jpf-fx42","tags":["article"]},{"url":"https://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m","tags":["article"]},{"url":"https://github.com/opencontainers/image-spec/security/advisories/GHSA-77vh-xpmg-72qh","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41772","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/0fM21h43arc","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44716","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/hcmEScgc00k","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44717","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0532","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x","tags":["article"]},{"url":"https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-20612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-20612","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20612","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-20617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044502","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-20617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20617","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1878","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203149-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178171","tags":["report"]},{"url":"https://bugzilla.suse.com/945190","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5262","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203151-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203152-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-3577","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2769-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2012-5783","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2012-6153","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-5262","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YYYTF4MJKJCHN6CREKINZ6NZL66SOXHJ/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UMLTVDGHZRB3F3GUJJIBKNM256N34XBW/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T00:00:00Z","modified":"2024-08-06T10:50:17.592Z","updated_at":"2026-11-02T14:33:44.23164Z"}],"euvd":[{"id":"EUVD-2018-0575","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T00:00:00Z","modified":"2024-08-06T10:50:17Z","updated_at":"2026-11-03T01:57:09.905604Z"}],"ghsa":[{"id":"GHSA-cfh5-3ghh-wfjx","title":"Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2018-10-17T00:05:06Z","modified":"2024-04-12T22:05:36Z","cwes":["CWE-347"],"updated_at":"2026-11-02T14:37:43.62603Z"}],"nvd":[{"id":"CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T14:55:05.1Z","modified":"2026-06-17T00:08:32.79Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.19899Z"}],"osv":[{"id":"RHSA-2014:1082","title":"Red Hat Security Advisory: thermostat1-httpcomponents-client security update","status":"published","published":"2024-09-13T09:19:14Z","modified":"2026-08-05T10:02:47Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1146","title":"Red Hat Security Advisory: httpcomponents-client security update","status":"published","published":"2024-09-13T09:19:23Z","modified":"2026-08-05T10:02:50Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1162","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.0 security update","status":"published","published":"2024-09-13T09:19:09Z","modified":"2026-08-09T10:01:35Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1166","title":"Red Hat Security Advisory: jakarta-commons-httpclient security update","status":"published","published":"2024-09-13T09:19:17Z","modified":"2026-08-05T10:02:52Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1320","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update","status":"published","published":"2024-09-13T09:19:55Z","modified":"2026-08-09T10:01:35Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1321","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update","status":"published","published":"2024-09-13T09:20:00Z","modified":"2026-08-09T10:01:36Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1833","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update","status":"published","published":"2024-09-13T09:20:20Z","modified":"2026-08-09T10:01:36Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:1834","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 5.2.0 security update","status":"published","published":"2024-09-13T09:20:26Z","modified":"2026-08-09T10:01:37Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2014:2019","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.2 security update","status":"published","published":"2024-09-13T09:20:43Z","modified":"2026-08-09T10:01:37Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2015:0158","title":"Red Hat Security Advisory: Red Hat Enterprise Virtualization Manager 3.5.0","status":"published","published":"2024-09-13T09:20:59Z","modified":"2026-08-09T10:01:38Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:02.532052Z"},{"id":"RHSA-2016:1773","title":"Red Hat Security Advisory: Red Hat OpenShift Enterprise 2.2.10 security, bug fix, and enhancement update","status":"published","published":"2024-09-29T17:04:53Z","modified":"2026-08-05T10:04:04Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2022:0055","title":"Red Hat Security Advisory: OpenShift Container Platform 4.10.3 bug fix and security update","status":"published","published":"2024-09-30T14:19:01Z","modified":"2026-08-20T10:02:39Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"CLSA-2026-1786536790","title":"TuxCare security update for org.apache.httpcomponents:httpclient (2 CVEs)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 2 CVEs. Fixed in 4.2-tuxcare.2.","status":"published","published":"2026-08-12T12:13:10Z","modified":"2026-11-02T19:45:53.389780238Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1791188247","title":"TuxCare security update for org.apache.httpcomponents:httpclient (2 CVEs)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 2 CVEs. Fixed in 4.2.6-tuxcare.2.","status":"published","published":"2026-10-05T08:17:27Z","modified":"2026-11-02T19:46:26.150153364Z","updated_at":"2026-11-02T20:29:22.637147Z"},{"id":"CLSA-2026-1793884176","title":"TuxCare security update for org.apache.httpcomponents:httpclient (2 CVEs)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 2 CVEs. Fixed in 4.2.2-tuxcare.2.","status":"published","published":"2026-11-05T14:09:37Z","modified":"2026-11-06T13:15:08.675803084Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1793886120","title":"TuxCare security update for org.apache.httpcomponents:httpclient (4 CVEs)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 4 CVEs. Fixed in 4.2.5-tuxcare.1.","status":"published","published":"2026-11-05T14:42:01Z","modified":"2026-11-06T13:15:20.816569639Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793886295","title":"TuxCare security update for org.apache.httpcomponents:httpclient (5 CVEs)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 5 CVEs. Fixed in 4.1.3-tuxcare.1.","status":"published","published":"2026-11-05T14:44:56Z","modified":"2026-11-06T13:15:20.815432202Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1794162677","title":"TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.2.1-tuxcare.5.","status":"published","published":"2026-11-08T19:31:18Z","modified":"2026-11-09T01:45:02.28127201Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794162824","title":"TuxCare security update for org.apache.httpcomponents:httpclient (1 CVE)","description":"TuxCare rebuilt org.apache.httpcomponents:httpclient to address 1 CVE. Fixed in 4.1.2-tuxcare.2.","status":"published","published":"2026-11-08T19:33:44Z","modified":"2026-11-09T01:45:03.339628681Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T14:55:05Z","modified":"2026-04-16T06:19:38.113473972Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T14:55:05.1Z","modified":"2026-10-23T15:47:37.656133668Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"DLA-222-1","title":"commons-httpclient - security update","status":"published","published":"2015-05-16T00:00:00Z","modified":"2026-03-09T01:19:25.566236Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"GHSA-cfh5-3ghh-wfjx","title":"Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2018-10-17T00:05:06Z","modified":"2024-12-03T06:09:02.24683Z","cwes":["CWE-347"],"updated_at":"2026-11-02T15:46:44.927642Z"},{"id":"MGASA-2014-0348","title":"Updated jakarta-commons-httpclient and httpcomponents-client packages fix security vulnerabilities","description":"Updated jakarta-commons-httpclient and httpcomponents-client packages fix\nsecurity vulnerabilities:\n\nThe Jakarta Commons HttpClient component may be susceptible to a 'Man in the\nMiddle Attack' due to a flaw in the default hostname verification during\nSSL/TLS when a specially crafted server side certificate is used\n(CVE-2012-6153).\n\nThe Apache httpcomponents HttpClient component may be susceptible to a 'Man\nin the Middle Attack' due to a flaw in the default hostname verification\nduring SSL/TLS when a specially crafted server side certificate is used\n(CVE-2014-3577).\n","status":"published","published":"2014-08-25T08:44:11Z","modified":"2026-04-16T06:22:32.872432099Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"MGASA-2014-0557","title":"Updated cxf packages fix security vulnerabilities","description":"Updated cxf packages fix security vulnerabilities:\n\nAn Apache CXF JAX-RS service can process SAML tokens received in the\nauthorization header of a request via the SamlHeaderInHandler. However it is\npossible to cause an infinite loop in the parsing of this header by passing \ncertain bad values for the header, leading to a Denial of Service attack on\nthe service (CVE-2014-3584).\n\nApache CXF is vulnerable to a possible SSL hostname verification bypass, due\nto a flaw in comparing the server hostname to the domain name in the Subject's\nDN field. A Man In The Middle attack can exploit this vulnerability by using\na specially crafted Subject DN to spoof a valid certificate (CVE-2014-3577).\n","status":"published","published":"2014-12-31T12:28:04Z","modified":"2026-04-16T06:24:24.85545314Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2020:1873-1","title":"Security update for apache-commons-httpclient","description":"This update for apache-commons-httpclient fixes the following issues:\n\n- http/conn/ssl/SSLConnectionSocketFactory.java ignores the\n  http.socket.timeout configuration setting during an SSL handshake,\n  which allows remote attackers to cause a denial of service (HTTPS\n  call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]\n- org.apache.http.conn.ssl.AbstractVerifier does not properly\n  verify that the server hostname matches a domain name in the\n  subject's Common Name (CN) or subjectAltName field of the X.509\n  certificate, which allows MITM attackers to spoof SSL servers\n  via a 'CN=' string in a field in the distinguished name (DN)\n  of a certificate. [bsc#1178171, CVE-2014-3577]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-07T13:24:32Z","modified":"2026-02-04T02:53:33.933486Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1875-1","title":"Security update for apache-commons-httpclient","description":"This update for apache-commons-httpclient fixes the following issues:\n\n- http/conn/ssl/SSLConnectionSocketFactory.java ignores the\n    http.socket.timeout configuration setting during an SSL handshake,\n    which allows remote attackers to cause a denial of service (HTTPS\n    call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]\n- org.apache.http.conn.ssl.AbstractVerifier does not properly\n    verify that the server hostname matches a domain name in the\n    subject's Common Name (CN) or subjectAltName field of the X.509\n    certificate, which allows MITM attackers to spoof SSL servers\n    via a 'CN=' string in a field in the distinguished name (DN)\n    of a certificate. [bsc#1178171, CVE-2014-3577]\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-08T05:26:16Z","modified":"2026-02-04T03:29:20.300558Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10621-1","title":"apache-commons-httpclient-3.1-13.4 on GA media","description":"These are all security issues fixed in the apache-commons-httpclient-3.1-13.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:14:52.775654Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2020:3149-1","title":"Security update for apache-commons-httpclient","description":"This update for apache-commons-httpclient fixes the following issues:\n\n- http/conn/ssl/SSLConnectionSocketFactory.java ignores the\n  http.socket.timeout configuration setting during an SSL handshake,\n  which allows remote attackers to cause a denial of service (HTTPS\n  call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]\n- org.apache.http.conn.ssl.AbstractVerifier does not properly\n  verify that the server hostname matches a domain name in the\n  subject's Common Name (CN) or subjectAltName field of the X.509\n  certificate, which allows MITM attackers to spoof SSL servers\n  via a 'CN=' string in a field in the distinguished name (DN)\n  of a certificate. [bsc#1178171, CVE-2014-3577]\n","status":"published","published":"2020-11-04T10:05:07Z","modified":"2025-05-02T04:04:05.475474Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3151-1","title":"Security update for apache-commons-httpclient","description":"This update for apache-commons-httpclient fixes the following issues:\n\n- http/conn/ssl/SSLConnectionSocketFactory.java ignores the\n  http.socket.timeout configuration setting during an SSL handshake,\n  which allows remote attackers to cause a denial of service (HTTPS\n  call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]\n- org.apache.http.conn.ssl.AbstractVerifier does not properly\n  verify that the server hostname matches a domain name in the\n  subject's Common Name (CN) or subjectAltName field of the X.509\n  certificate, which allows MITM attackers to spoof SSL servers\n  via a 'CN=' string in a field in the distinguished name (DN)\n  of a certificate. [bsc#1178171, CVE-2014-3577]\n","status":"published","published":"2020-11-04T10:06:34Z","modified":"2026-02-04T04:35:00.683998Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3152-1","title":"Security update for apache-commons-httpclient","description":"This update for apache-commons-httpclient fixes the following issues:\n\n- http/conn/ssl/SSLConnectionSocketFactory.java ignores the\n    http.socket.timeout configuration setting during an SSL handshake,\n    which allows remote attackers to cause a denial of service (HTTPS\n    call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262]\n- org.apache.http.conn.ssl.AbstractVerifier does not properly\n    verify that the server hostname matches a domain name in the\n    subject's Common Name (CN) or subjectAltName field of the X.509\n    certificate, which allows MITM attackers to spoof SSL servers\n    via a 'CN=' string in a field in the distinguished name (DN)\n    of a certificate. [bsc#1178171, CVE-2014-3577]\n","status":"published","published":"2020-11-04T10:07:13Z","modified":"2026-02-04T02:34:11.511909Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"UBUNTU-CVE-2014-3577","description":"org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.","status":"published","published":"2014-08-21T00:00:00Z","modified":"2026-02-04T02:21:16.863478Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2769-1","title":"commons-httpclient vulnerabilities","description":"It was discovered that Apache Commons HttpClient did not properly verify the\nCommon Name or subjectAltName fields of X.509 certificates. An attacker could\nexploit this to perform a machine-in-the-middle attack to view sensitive\ninformation or alter encrypted communications. This issue only affected Ubuntu\n12.04 LTS. (CVE-2012-5783)\n\nFlorian Weimer discovered the fix for CVE-2012-5783 was incomplete for Apache\nCommons HttpClient. An attacker could exploit this to perform a\nmachine-in-the-middle attack to view sensitive information or alter\nencrypted communications. This issue only affected Ubuntu 12.04 LTS.\n(CVE-2012-6153)\n\nSubodh Iyengar and Will Shackleton discovered the fix for CVE-2012-5783 was\nincomplete for Apache Commons HttpClient. An attacker could exploit this to\nperform a machine-in-the-middle attack to view sensitive information or alter\nencrypted communications. (CVE-2014-3577)\n\nIt was discovered that Apache Commons HttpClient did not properly handle read\ntimeouts during HTTPS handshakes. A remote attacker could trigger this flaw to\ncause a denial of service. (CVE-2015-5262)\n","status":"published","published":"2015-10-14T15:43:52Z","modified":"2026-02-10T04:40:55Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}