{"id":"CVE-2022-23221","aliases":["CLSA-2025-1763597218","CLSA-2026-1793128778","DEBIAN-CVE-2022-23221","DLA-2923-1","DSA-5076-1","EUVD-2022-0440","GHSA-45hx-wfhj-473x","RHSA-2022:4918","RHSA-2022:4919","RHSA-2024:10207","RHSA-2024:10208","UBUNTU-CVE-2022-23221","USN-5365-1","USN-6834-1"],"status":"published","title":"Arbitrary code execution in H2 Console","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.64766,"percentile":0.9925,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-88"],"published":"2022-01-19T00:00:00Z","modified":"2026-11-03T08:02:42Z","exploits":[{"source":"pocgithub","id":"straightSang/H2-database-CVE-2022-23221","title":"straightSang/H2-database-CVE-2022-23221","date":"2026-07-09","url":"https://github.com/straightSang/H2-database-CVE-2022-23221"},{"source":"pocgithub","id":"CyberCTF/vulhub-h2database-cve-2022-23221","title":"CyberCTF/vulhub-h2database-cve-2022-23221","date":"2026-10-08","url":"https://github.com/CyberCTF/vulhub-h2database-cve-2022-23221"}],"fixes":[{"ecosystem":"Maven","package":"com.h2database:h2","fixed_in":["2.1.210"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"com.h2database:h2","fixed_in":["1.3.176-tuxcare.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"h2database","fixed_in":["2.1.210-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"h2database","fixed_in":["2.1.210-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"h2database","fixed_in":["2.1.210-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"h2database","fixed_in":["1.4.191-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"h2database","fixed_in":["1.4.196-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"h2database","fixed_in":["1.4.197-4+deb10u1build0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"h2database","fixed_in":["2.1.210+really1.4.197-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.h2database:h2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.h2database:h2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.4.200"},{"fixed":"1.4.200-tuxcare.1"}]}],"versions":["1.4.200"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"com.h2database:h2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.3.176"},{"fixed":"1.3.176-tuxcare.2"}]}],"versions":["1.3.176","1.3.176-tuxcare.1"]},{"source":"osv","ecosystem":"Debian:12","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.193-1+deb9u1"}]}],"versions":["1.4.193-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.197-4+deb10u1"}]}],"versions":["1.4.197-4"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.197-4+deb11u1"}]}],"versions":["1.4.197-4"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.h2database:h2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210"}]}],"versions":["1.0.20061217","1.0.20070304","1.0.20070429","1.0.20070617","1.0.57","1.0.58","1.0.59","1.0.60","1.0.61","1.0.62","1.0.63","1.0.64","1.0.65","1.0.66","1.0.67","1.0.68","1.0.69","1.0.70","1.0.71","1.0.72","1.0.73","1.0.74","1.0.75","1.0.76","1.0.77","1.0.78","1.0.79","1.1.100","1.1.101","1.1.102","1.1.103","1.1.104","1.1.105","1.1.106","1.1.107","1.1.108","1.1.109","1.1.110","1.1.111","1.1.112","1.1.113","1.1.114","1.1.115","1.1.116","1.1.117","1.1.118","1.1.119","1.2.120","1.2.121","1.2.122","1.2.123","1.2.124","1.2.125","1.2.126","1.2.127","1.2.128","1.2.129","1.2.130","1.2.131","1.2.132","1.2.133","1.2.134","1.2.135","1.2.136","1.2.137","1.2.138","1.2.139","1.2.140","1.2.141","1.2.142","1.2.143","1.2.144","1.2.145","1.2.147","1.3.146","1.3.148","1.3.149","1.3.150","1.3.151","1.3.152","1.3.153","1.3.154","1.3.155","1.3.156","1.3.157","1.3.158","1.3.159","1.3.160","1.3.161","1.3.162","1.3.163","1.3.164","1.3.165","1.3.166","1.3.167","1.3.168","1.3.169","1.3.170","1.3.171","1.3.172","1.3.173","1.3.174","1.3.175","1.3.176","1.4.177","1.4.178","1.4.179","1.4.180","1.4.181","1.4.182","1.4.183","1.4.184","1.4.185","1.4.186","1.4.187","1.4.188","1.4.189","1.4.190","1.4.191","1.4.192","1.4.193","1.4.194","1.4.195","1.4.196","1.4.197","1.4.198","1.4.199","1.4.200","2.0.202","2.0.204","2.0.206"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.6.1-1.redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00004.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.7-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-2.SP4_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.SP04_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.6.1-1.redhat_00003.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-buffer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-memcache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-mqtt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-smtp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-socks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-stomp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-codec-xml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-handler-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-resolver-dns-classes-macos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-epoll","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-classes-kqueue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-native-unix-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-rxtx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-sctp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-netty-transport-udt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.72-4.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00004.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.7-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-ejb-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-naming-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-http-transaction-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.11-1.SP1_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.5-3.GA_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.17-2.SP4_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-xerces-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.12.0-3.SP04_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-9.redhat_00042.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.12-1.Final_redhat_00001.1.el8eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-8.redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-3.redhat_00004.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-annotations-api_1.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.13-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-2.Final_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.redhat_00015.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-2.redhat_00003.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-26.redhat_00015.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.191-1ubuntu0.1~esm1"}]}],"versions":["1.4.185-1","1.4.185-2","1.4.190-1","1.4.191-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.196-2ubuntu0.1~esm1"}]}],"versions":["1.4.196-1","1.4.196-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.197-4+deb10u1build0.20.04.1"}]}],"versions":["1.4.197-4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.210+really1.4.197-1"}]}],"versions":["1.4.197-4","2.1.210-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.197-4+deb10u1build0.20.04.1"}]}],"versions":["1.4.197-4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.191-1ubuntu0.1~esm1"}]}],"versions":["1.4.185-1","1.4.185-2","1.4.190-1","1.4.191-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.196-2ubuntu0.1~esm1"}]}],"versions":["1.4.196-1","1.4.196-2"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"h2database","product":"h2"},{"vendor":"oracle","product":"communications_cloud_native_core_console"}],"references":[{"url":"https://github.com/h2database/h2database/security/advisories","tags":["x_transferred","Mitigation","Patch","Third Party Advisory","advisory","web","report"]},{"url":"http://seclists.org/fulldisclosure/2022/Jan/39","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2022/dsa-5076","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","web"]},{"url":"https://github.com/h2database/h2database/releases/tag/version-2.1.210","tags":["x_transferred","Patch","Release Notes","Third Party Advisory","web","report"]},{"url":"https://twitter.com/d0nkey_man/status/1483824727936450564","tags":["x_transferred","Exploit","Third Party Advisory","web","report"]},{"url":"http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2022.html","tags":["x_transferred","Not Applicable","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0011/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23221","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-45hx-wfhj-473x","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23221.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23221","tags":["advisory"]},{"url":"https://github.com/h2database/h2database","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20230818-0011","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4918","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2047200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073890","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23120","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23171","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23194","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23241","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23299","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23300","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23312","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23313","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23336","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23338","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23339","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23351","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23353","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23429","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23432","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23451","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23531","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23532","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4918.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36518","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-57j2-w4cx-62h2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37136","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37136","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37136","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-37137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42392","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42392","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42392","tags":["advisory"]},{"url":"https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-43797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-43797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43797","tags":["advisory"]},{"url":"https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0084","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0084","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0853","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0866","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1319","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1319","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1319","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-21299","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-21299","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21299","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23221","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23437","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23913","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fjynj57rd99s814rdn5hzvmx8lz403q2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:4919","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23121","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4919.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10207","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316116","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23025","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10207.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3859","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","tags":["advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","tags":["article"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","tags":["article"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41853","tags":["advisory"]},{"url":"http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control","tags":["article"]},{"url":"https://github.com/advisories/GHSA-77xx-rxvh-q682","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3171","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26464","tags":["advisory"]},{"url":"https://www.ibm.com/support/pages/security-bulletin-vulnerability-log4j-1216jar-affect-ibm-operations-analytics-log-analysis-cve-2023-26464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39410","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39410","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3819","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28752","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt","tags":["article"]},{"url":"https://github.com/advisories/GHSA-qmgx-j96g-4428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47561","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10208","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912881","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-27708","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10208.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7238","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7238","tags":["advisory"]},{"url":"https://netty.io/news/2019/12/18/4-1-44-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28052","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23221","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5365-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6834-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-42392","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-23221","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T00:00:00Z","modified":"2025-05-05T16:27:07.353Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-0440","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T00:00:00Z","modified":"2025-05-05T16:27:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:56.549702Z"}],"ghsa":[{"id":"GHSA-45hx-wfhj-473x","title":"Arbitrary code execution in H2 Console","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-21T23:07:39Z","modified":"2023-08-18T15:47:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:37:00.074932Z"}],"nvd":[{"id":"CVE-2022-23221","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T17:15:09Z","modified":"2026-06-17T04:29:41.63Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T14:07:11.52734Z"}],"osv":[{"id":"CVE-2022-23221","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T00:00:00Z","modified":"2026-10-28T10:25:28.585255986Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DEBIAN-CVE-2022-23221","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T17:15:09Z","modified":"2026-11-03T08:02:42.352769897Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"GHSA-45hx-wfhj-473x","title":"Arbitrary code execution in H2 Console","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-21T23:07:39Z","modified":"2024-02-16T08:14:35.882108Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-88"],"updated_at":"2026-11-02T15:46:36.434231Z"},{"id":"RHSA-2022:4918","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7","status":"published","published":"2024-09-29T19:10:02Z","modified":"2026-10-13T10:03:05Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:4919","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8","status":"published","published":"2024-09-29T19:09:55Z","modified":"2026-10-13T10:03:06Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2024:10207","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update","status":"published","published":"2024-11-26T07:31:41Z","modified":"2026-10-20T10:02:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:10208","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update","status":"published","published":"2024-11-26T07:31:51Z","modified":"2026-10-20T10:02:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"UBUNTU-CVE-2022-23221","description":"H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.","status":"published","published":"2022-01-19T17:15:00Z","modified":"2026-02-04T02:29:23.919782Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"CLSA-2025-1763597218","title":"TuxCare security update for com.h2database:h2 (4 CVEs)","description":"TuxCare rebuilt com.h2database:h2 to address 4 CVEs. Fixed in 1.4.200-tuxcare.1.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-30T19:45:04.97031498Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1793128778","title":"TuxCare security update for com.h2database:h2 (1 CVE)","description":"TuxCare rebuilt com.h2database:h2 to address 1 CVE. Fixed in 1.3.176-tuxcare.2.","status":"published","published":"2026-10-27T19:19:38Z","modified":"2026-10-28T01:45:04.651423684Z","updated_at":"2026-11-02T15:43:55.34846Z"},{"id":"DLA-2923-1","title":"h2database - security update","status":"published","published":"2022-02-15T00:00:00Z","modified":"2026-03-09T01:18:57.840402Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5076-1","title":"h2database - security update","status":"published","published":"2022-02-15T00:00:00Z","modified":"2026-03-09T02:11:02.349041Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"USN-5365-1","title":"h2database vulnerabilities","description":"It was discovered that H2 was vulnerable to deserialization of\nuntrusted data. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2021-42392)\n\nIt was discovered that H2 incorrectly handled some specially\ncrafted connection URLs. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2022-23221)\n","status":"published","published":"2022-04-05T15:14:29Z","modified":"2026-02-10T04:42:33Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-6834-1","title":"h2database vulnerabilities","description":"It was discovered that H2 was vulnerable to deserialization of\nuntrusted data. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2021-42392)\n\nIt was discovered that H2 incorrectly handled some specially\ncrafted connection URLs. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2022-23221)\n","status":"published","published":"2024-06-13T14:44:19Z","modified":"2026-06-25T13:30:34.591336627Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}