{"id":"CVE-2025-23366","aliases":["EUVD-2025-0099","GHSA-jhvj-f397-8w6q","RHSA-2025:10924","RHSA-2025:10925","RHSA-2025:10926"],"status":"published","title":"Org.jboss.hal:hal-console: wildfly hal console cross-site scripting","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00461,"percentile":0.40213,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2025-01-14T17:41:43Z","modified":"2026-10-28T02:30:44Z","fixes":[{"ecosystem":"Maven","package":"org.jboss.hal:hal-console","fixed_in":["3.7.7.Final"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jboss.hal:hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7.Final"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jboss.hal:hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.7.Final"}]}],"versions":["3.5.0.Final","3.5.1.Final","3.5.10.Final","3.5.11.Final","3.5.12.Final","3.5.2.Final","3.5.3.Final","3.5.4.Final","3.5.5.Final","3.5.6.Final","3.5.7.Final","3.5.8.Final","3.5.9.Final","3.6.0.Final","3.6.1.Final","3.6.10.Final","3.6.11.Final","3.6.12.Final","3.6.13.Final","3.6.14.Final","3.6.15.Final","3.6.16.Final","3.6.17.Final","3.6.18.Final","3.6.19.Final","3.6.2.Final","3.6.20.Final","3.6.21.Final","3.6.22.Final","3.6.23.Final","3.6.24.Final","3.6.27.Final","3.6.3.Final","3.6.4.Final","3.6.5.Final","3.6.6.Final","3.6.7.Final","3.6.8.Final","3.6.9.Final","3.7.0.Final","3.7.4.Final","3.7.5.Final","3.7.6.Final"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-artemis-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-9.SP10_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el7eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-9.SP10_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.15-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el8eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-commons","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-core-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-dto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hornetq-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-hqclient-protocol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jdbc-store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-jms-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-journal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-ra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-selector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-service-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-activemq-artemis-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.16.0-21.redhat_00055.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-artemis-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-artemis-native-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.0.2-5.redhat_00004.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-elytron-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-glassfish-jsf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.14-9.SP10_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hal-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.27-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-hibernate-validator-cdi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.23-3.SP2_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-common-spi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-core-impl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-deployers-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-ironjacamar-validator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.21-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10.0-42.Final_redhat_00042.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-jbossws-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.15-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.6-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-elytron-tool","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.26-1.Final_redhat_00001.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.4.23-3.GA_redhat_00002.1.el9eap"}]}],"bundled":7}],"products":[{"vendor":"red hat","product":"red hat jboss data grid 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 7"},{"vendor":"red hat","product":"red hat jboss enterprise application platform 8"},{"vendor":"red hat","product":"red hat jboss enterprise application platform expansion pack"},{"vendor":"redhat","product":"hal_management_console"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:10924","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10925","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10926","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10931","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23366","tags":["vdb-entry","x_refsource_REDHAT","Vendor Advisory","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337619","tags":["issue-tracking","x_refsource_REDHAT","Vendor Advisory","report","web"]},{"url":"https://github.com/hal/console/security/advisories/GHSA-jhvj-f397-8w6q","tags":["web"]},{"url":"https://github.com/hal/console/releases/tag/v3.7.7","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jhvj-f397-8w6q"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23366.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23366","tags":["advisory"]},{"url":"https://github.com/hal/console","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2320848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2339095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2370118","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-28676","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-28905","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29217","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29440","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29815","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29862","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29866","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29914","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29969","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30031","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30059","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30264","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-30359","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10924.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-10234","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-10234","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10234","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-2251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-2251","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2251","tags":["advisory"]},{"url":"https://github.com/wildfly/wildfly/pull/18872","tags":["article"]},{"url":"https://github.com/wildfly/wildfly/releases/tag/36.0.0.Final","tags":["article"]},{"url":"https://issues.redhat.com/browse/WFLY-20550","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-2901","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-2901","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2901","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-23184","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23184","tags":["advisory"]},{"url":"https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-23366","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-35036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-35036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-35036","tags":["advisory"]},{"url":"https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_single/#section-hibernateconstraintvalidatorcontext","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/05f795bb7cf18856004f40e5042709e550ed0d6e","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/254858d9dcc4e7cd775d1b0f47f482218077c5e1","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/d2db40b9e7d22c7a0b44d7665242dfc7b4d14d78","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/commit/e076293b0ee1bfa97b6e67d05ad9eee1ad77e893","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/compare/6.1.7.Final...6.2.0.Final","tags":["article"]},{"url":"https://github.com/hibernate/hibernate-validator/pull/1138","tags":["article"]},{"url":"https://hibernate.atlassian.net/browse/HV-1816","tags":["article"]},{"url":"https://hibernate.org/validator/documentation/migration-guide/#6-2-0-cr1","tags":["article"]},{"url":"https://in.relation.to/2021/01/06/hibernate-validator-700-62-final-released/#expression-language","tags":["article"]},{"url":"https://labs.watchtowr.com/expression-payloads-meet-mayhem-cve-2025-4427-and-cve-2025-4428/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-5245","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-48734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48734","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wxr5-93ph-8wr9","tags":["advisory"]},{"url":"https://github.com/apache/commons-beanutils/commit/28ad955a1613ed5885870cc7da52093c1ce739dc","tags":["article"]},{"url":"https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2025/05/28/6","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-29218","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10925.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-29219","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10926.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-23366","title":"Org.jboss.hal:hal-console: wildfly hal console cross-site scripting","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","status":"published","published":"2025-01-14T17:41:43.092Z","modified":"2026-08-19T00:18:00.417Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:33.082076Z"}],"euvd":[{"id":"EUVD-2025-0099","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","status":"published","published":"2025-01-14T17:41:43Z","modified":"2026-08-19T00:18:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:45.709762Z"}],"ghsa":[{"id":"GHSA-jhvj-f397-8w6q","title":"HAL Console has a Cross Site Scripting (XSS) vulnerability of user input","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.\n\n### Impact\nCross-site scripting (XSS) vulnerability in the management console.\n\n### Patches\nFixed in [HAL 3.7.7.Final](https://github.com/hal/console/releases/tag/v3.7.7) \n\n### Workarounds\nNo workaround available\n\n### References\n- https://access.redhat.com/security/cve/CVE-2025-23366\n- https://bugzilla.redhat.com/show_bug.cgi?id=2337619\n","status":"published","published":"2025-01-16T19:05:39Z","modified":"2025-01-16T19:05:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:38:27.067633Z"}],"nvd":[{"id":"CVE-2025-23366","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","status":"published","published":"2025-01-14T18:16:06.29Z","modified":"2026-08-19T01:16:54.713Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:48.713733Z"}],"osv":[{"id":"CVE-2025-23366","title":"Org.jboss.hal:hal-console: wildfly hal console cross-site scripting","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.","status":"published","published":"2025-01-14T17:41:43.092Z","modified":"2026-10-28T02:30:44.944614425Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:44:47.009967Z"},{"id":"GHSA-jhvj-f397-8w6q","title":"HAL Console has a Cross Site Scripting (XSS) vulnerability of user input","description":"A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.\n\n### Impact\nCross-site scripting (XSS) vulnerability in the management console.\n\n### Patches\nFixed in [HAL 3.7.7.Final](https://github.com/hal/console/releases/tag/v3.7.7) \n\n### Workarounds\nNo workaround available\n\n### References\n- https://access.redhat.com/security/cve/CVE-2025-23366\n- https://bugzilla.redhat.com/show_bug.cgi?id=2337619\n","status":"published","published":"2025-01-16T19:05:39Z","modified":"2026-09-10T03:50:22.002017317Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:50.336262Z"},{"id":"RHSA-2025:10924","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update","status":"published","published":"2025-07-15T10:08:00Z","modified":"2026-10-09T10:13:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10925","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update","status":"published","published":"2025-07-15T10:08:01Z","modified":"2026-10-09T10:13:33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10926","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.23 Security update","status":"published","published":"2025-07-15T10:08:02Z","modified":"2026-10-09T10:13:34Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"}]}}