{"id":"CVE-2017-3163","aliases":["DEBIAN-CVE-2017-3163","DLA-1046-1","DSA-4124-1","EUVD-2018-0485","GHSA-387v-84cv-9qmc","RHSA-2018:1448","RHSA-2018:1449","RHSA-2018:1450","RHSA-2018:1451","UBUNTU-CVE-2017-3163"],"status":"published","title":"Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06559,"percentile":0.93854,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2017-07-30T00:00:00Z","modified":"2026-10-24T10:30:39Z","fixes":[{"ecosystem":"Maven","package":"org.apache.solr:solr-core","fixed_in":["5.5.4","6.4.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"lucene-solr","fixed_in":["3.6.2+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lucene-solr","fixed_in":["3.6.2+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lucene-solr","fixed_in":["3.6.2+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"lucene-solr","fixed_in":["3.6.0+dfsg-1+deb7u2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lucene-solr","fixed_in":["3.6.2+dfsg-2ubuntu0.1~esm2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.4"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.4.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0+dfsg-1+deb7u2"}]}],"versions":["3.6.0+dfsg-1","3.6.0+dfsg-1+deb7u1"]},{"source":"osv","ecosystem":"Debian:8","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-5+deb8u1"}]}],"versions":["3.6.2+dfsg-5"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-10+deb9u1"}]}],"versions":["3.6.2+dfsg-10"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.4"}]}],"versions":["1.3.0","1.4.0","1.4.1","3.1.0","3.2.0","3.3.0","3.4.0","3.5.0","3.6.0","3.6.1","3.6.2","4.0.0","4.0.0-ALPHA","4.0.0-BETA","4.1.0","4.10.0","4.10.1","4.10.2","4.10.3","4.10.4","4.2.0","4.2.1","4.3.0","4.3.1","4.4.0","4.5.0","4.5.1","4.6.0","4.6.1","4.7.0","4.7.1","4.7.2","4.8.0","4.8.1","4.9.0","4.9.1","5.0.0","5.1.0","5.2.0","5.2.1","5.3.0","5.3.1","5.3.2","5.4.0","5.4.1","5.5.0","5.5.1","5.5.2","5.5.3"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.solr:solr-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.4.1"}]}],"versions":["6.0.0","6.0.1","6.1.0","6.2.0","6.2.1","6.3.0","6.4.0"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"codehaus-jackson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"codehaus-jackson-core-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"codehaus-jackson-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"codehaus-jackson-mapper-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"codehaus-jackson-xc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"hornetq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.25-26.SP24_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-client-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-clustering","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-cmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-controller-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-core-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-deployment-repository","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-deployment-scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-domain-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-domain-management","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-ee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-ee-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-ejb3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-host-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-jsr77","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-management-client-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-modcluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-osgi-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-osgi-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-picketlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-platform-mbean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-pojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-process-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-sar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-system-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-transactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-webservices","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-weld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jboss-as-xts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-bundles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-domain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-modules-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-product-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-standalone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossas-welcome-content-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.17.43-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.28-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.18-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-8.redhat_9.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el7","package":"picketbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.Final_redhat_1.1.ep6.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"codehaus-jackson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"codehaus-jackson-core-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"codehaus-jackson-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"codehaus-jackson-mapper-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"codehaus-jackson-xc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"hornetq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.25-26.SP24_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-client-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-clustering","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-cmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-controller-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-core-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-deployment-repository","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-deployment-scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-domain-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-domain-management","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ee-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-ejb3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-host-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-jsr77","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-management-client-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-modcluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-osgi-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-picketlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-platform-mbean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-pojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-process-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-sar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-system-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-transactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-webservices","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-weld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-as-xts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-bundles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-domain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-modules-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-product-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-standalone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossas-welcome-content-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.17.43-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.28-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.18-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-8.redhat_9.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"picketbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.Final_redhat_1.1.ep6.el6"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"codehaus-jackson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"codehaus-jackson-core-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"codehaus-jackson-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"codehaus-jackson-mapper-asl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"codehaus-jackson-xc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.9-12.redhat_6.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"hornetq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.25-26.SP24_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-client-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-clustering","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-cmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-connector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-controller-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-core-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-deployment-repository","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-deployment-scanner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-domain-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-domain-management","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ee","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ee-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-ejb3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-host-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jacorb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jaxr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jaxrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jdr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-jsr77","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-management-client-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-modcluster","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-naming","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi-configadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-osgi-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-picketlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-platform-mbean","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-pojo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-process-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-remoting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-sar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-system-jmx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-threads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-transactions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-version","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-webservices","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-weld","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jboss-as-xts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-appclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-bundles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-domain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-modules-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-product-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-standalone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossas-welcome-content-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.17.43-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jbossweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.28-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"jgroups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.2.18-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-8.redhat_9.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el5","package":"picketbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.7-1.Final_redhat_1.1.ep6.el5"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-ec2-eap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.ep6.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:6::el6","package":"jboss-ec2-eap-samples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.5.20-1.Final_redhat_1.ep6.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.2+dfsg-2ubuntu0.1~esm2"}]}],"versions":["3.6.2+dfsg-1","3.6.2+dfsg-2","3.6.2+dfsg-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"lucene-solr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-7","3.6.2+dfsg-8","3.6.2+dfsg-8ubuntu0.1","3.6.2+dfsg-8ubuntu0.1+esm1"]}],"products":[{"vendor":"apache","product":"solr"},{"vendor":"apache software foundation","product":"apache solr"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1448","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1449","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1450","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1451","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1447","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://www.debian.org/security/2018/dsa-4124","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3163","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-387v-84cv-9qmc","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488@%3Csolr-user.lucene.apache.org%3E","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-3163","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/?version=6.4","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1379207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1506612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1528565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1549276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559018","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1448.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-4978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-4978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-4978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-3163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-3163","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15095","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15095","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15095","tags":["advisory"]},{"url":"https://access.redhat.com/solutions/3442891","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-17485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17485","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1304","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1304","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1304","tags":["advisory"]},{"url":"https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.85","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.50","tags":["article"]},{"url":"https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.28","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7489","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7489","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7489","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8088","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8088","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8088","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559016","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1449.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1462702","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7525","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7525","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559017","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1450.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1451.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-3163","tags":["report"]},{"url":"https://issues.apache.org/jira/browse/SOLR-10031","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-3163","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:00:00Z","modified":"2024-09-16T18:39:30.795Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2018-0485","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:00:00Z","modified":"2024-09-16T18:39:30Z","updated_at":"2026-11-03T00:55:30.637715Z"}],"ghsa":[{"id":"GHSA-387v-84cv-9qmc","title":"Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2018-10-18T16:40:43Z","modified":"2023-01-11T05:04:14Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:36:12.361159Z"}],"nvd":[{"id":"CVE-2017-3163","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:29:00.207Z","modified":"2026-06-17T01:17:39.017Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"CVE-2017-3163","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:29:00.207Z","modified":"2026-10-24T10:30:39.277199419Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-3163","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:29:00.207Z","modified":"2026-09-01T20:03:47.970255205Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"GHSA-387v-84cv-9qmc","title":"Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2018-10-18T16:40:43Z","modified":"2023-11-08T03:59:20.650184Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"RHSA-2018:1448","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update","status":"published","published":"2024-09-20T13:51:41Z","modified":"2026-08-09T10:01:45Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1449","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update","status":"published","published":"2024-09-20T13:51:33Z","modified":"2026-08-09T10:01:45Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1450","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update","status":"published","published":"2024-09-20T13:51:26Z","modified":"2026-08-09T10:01:46Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1451","title":"Red Hat Security Advisory: eap6-jboss-ec2-eap security update","status":"published","published":"2024-09-20T13:51:17Z","modified":"2026-08-09T10:01:47Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2017-3163","description":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","status":"published","published":"2017-08-30T14:29:00Z","modified":"2025-09-08T16:44:04Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1046-1","title":"lucene-solr - security update","status":"published","published":"2017-07-30T00:00:00Z","modified":"2026-03-09T01:01:32.944482Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4124-1","title":"lucene-solr - security update","status":"published","published":"2018-02-27T00:00:00Z","modified":"2026-03-09T01:18:51.132739Z","updated_at":"2026-11-02T15:46:16.862196Z"}]}}