CVE-2011-2730
NoneCVSS
—
EPSS
11.8%
Published
Dec 5, 2012
CISA due date
—
The record
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) name attribute in a (a) spring:hasBindErrors tag; (2) path attribute in a (b) spring:bind or (c) spring:nestedpath tag; (3) arguments, (4) code, (5) text, (6) var, (7) scope, or (8) message attribute in a (d) spring:message or (e) spring:theme tag; or (9) var, (10) scope, or (11) value attribute in a (f) spring:transform tag, aka "Expression Language Injection."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.springframework:spring-core | 0 | 2.5.6.SEC03 |
| Maven | org.springframework:spring-core | 2.5.7.SR0 | 2.5.7.SR023 |
| Maven | org.springframework:spring-core | 3.0.0 | 3.0.6 |
| Debian:6.0 | libspring-2.5-java | 0 | 2.5.6.SEC02-2+squeeze1 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | aopalliance | 0 | 0:1.0-5.2.jdk6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | apache-cxf | 0 | 0:2.2.12-6.1.patch_04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | bsh2 | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | bsh2-bsf | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | glassfish-jaxb | 0 | 0:2.1.12-12_patch_03.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | google-guice | 0 | 0:2.0-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3 | 0 | 1:3.3.2-1.6.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-annotations | 0 | 0:3.4.0-3.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-entitymanager | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-javadoc | 0 | 1:3.3.2-1.6.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-search | 0 | 0:3.1.1-2.3.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hibernate3-search-javadoc | 0 | 0:3.1.1-2.3.GA_CP05.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq | 0 | 0:2.2.24-1.EAP.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq-native | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | hornetq-native-debuginfo | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jacorb-jboss | 0 | 0:2.3.2-2.jboss_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | javassist | 0 | 0:3.12.0-6.SP1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-aop2 | 0 | 0:2.1.6-5.CP06.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-bootstrap | 0 | 0:1.0.2-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cache-core | 0 | 0:3.2.11-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cache-pojo | 0 | 0:3.0.1-1.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cl | 0 | 0:2.0.11-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-cluster-ha-server-api | 0 | 0:1.2.1-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-common-beans | 0 | 0:1.0.1-2.1.Final.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-common-core | 0 | 0:2.2.21-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-eap5-native | 0 | 0:5.2.0-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb-3.0-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-cache | 0 | 0:1.0.0-4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-core | 0 | 0:1.3.9-0.4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-ext-api | 0 | 0:1.0.0-4.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-ext-api-impl | 0 | 0:1.0.0-3.7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-interceptors | 0 | 0:1.0.9-0.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-metadata | 0 | 0:1.0.0-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-metrics-deployer | 0 | 0:1.1.1-0.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-security | 0 | 0:1.0.2-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout-3.0-api | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-timeout-spi | 0 | 0:0.1.1-0.5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-ejb3-transactions | 0 | 0:1.0.2-1.4.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jacc-1.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jad-1.2-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jaspi-1.0-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-javaee | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-javaee-poms | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jaxrpc-api_1.1_spec | 0 | 0:1.0.0-16.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jca-1.5-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jms-1.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-jpa-deployers | 0 | 0:1.0.0-6.SP2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-logmanager | 0 | 0:1.1.2-6.GA_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-messaging | 0 | 0:1.4.8-12.SP9.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-naming | 0 | 0:5.0.3-5.CP02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-reflect | 0 | 0:2.0.4-2.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-remoting | 0 | 0:2.5.4-10.SP4.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2 | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-docs | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-examples | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-seam2-runtime | 0 | 0:2.2.6.EAP5-9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-security-negotiation | 0 | 0:2.1.3-1.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-security-spi | 0 | 1:2.0.5-4.SP3_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-transaction-1.0.1-api | 0 | 0:5.0.2-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jboss-vfs2 | 0 | 0:2.2.1-2.GA.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-client | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-hornetq | 0 | 0:5.2.0-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-messaging | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-tp-licenses | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-ws-cxf | 0 | 0:5.2.0-8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossas-ws-native | 0 | 0:5.2.0-14.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbosssx2 | 0 | 0:2.0.5-8.3.SP3_1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossts | 0 | 1:4.6.1-12.CP13.8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossts-javadoc | 0 | 1:4.6.1-12.CP13.8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-el-1.0-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-jsp-2.1-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-lib | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossweb-servlet-2.5-api | 0 | 0:2.1.13-2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws | 0 | 0:3.1.2-13.SP15_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-common | 0 | 0:1.1.0-9.SP10.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-framework | 0 | 0:3.1.2-9.SP13.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jbossws-spi | 0 | 0:1.1.2-6.SP8.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jgroups | 0 | 1:2.6.22-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-embedded | 0 | 0:1.3.4-19.SP6.9.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-hibernate-plugin | 0 | 0:3.0.0-14.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-jboss-as-5-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | jopr-jboss-cache-v3-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-demo | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-jbossas | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-jbossweb2 | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-native | 0 | 0:1.0.10-10.GA_CP04_patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-native-debuginfo | 0 | 0:1.0.10-10.GA_CP04_patch01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | mod_cluster-tomcat6 | 0 | 0:1.0.10-12.2.GA_CP04.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | netty | 0 | 0:3.2.5-6.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-federation | 0 | 0:2.1.5-3.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-idp | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-pdp | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | picketlink-quickstarts-sts | 0 | 0:2.1.5-1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-examples | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-javadoc | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | resteasy-manual | 0 | 0:1.2.1-18.CP02_patch02.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rh-eap-docs | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rh-eap-docs-examples | 0 | 0:5.2.0-7.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-common-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-client-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-comm-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-domain | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-gui | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-native-system | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-plugin-api | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-plugin-container | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-core-util | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-jboss-as-common | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-jmx-plugin | 0 | 0:3.0.0-21.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-modules-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-platform-plugin | 0 | 0:3.0.0-15.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | rhq-plugins-parent | 0 | 0:3.0.0-22.EmbJopr5.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2 | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-agent | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-all | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-aop | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-beans | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-context | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | spring2-core | 0 | 0:2.5.6-9.SEC03.1.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | wss4j | 0 | 0:1.5.12-4.2_patch_02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xerces-j2 | 0 | 0:2.9.1-10.patch02.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.1-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.2-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-jaxp-1.3-apis | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver10 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver11 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-resolver12 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-which10 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-commons-which11 | 0 | 1:1.3.04-8.2_patch_01.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el4 | xml-security | 0 | 0:1.5.1-2.ep5.el4 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | aopalliance | 0 | 0:1.0-5.2.jdk6.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | apache-cxf | 0 | 0:2.2.12-6.1.patch_04.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | bsh2 | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | bsh2-bsf | 0 | 0:2.0-0.b4.15.1.patch01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | glassfish-jaxb | 0 | 0:2.1.12-12_patch_03.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | google-guice | 0 | 0:2.0-3.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3 | 0 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-annotations | 0 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-annotations-javadoc | 0 | 0:3.4.0-3.3.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-entitymanager | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-entitymanager-javadoc | 0 | 0:3.4.0-4.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-javadoc | 0 | 1:3.3.2-1.5.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-search | 0 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hibernate3-search-javadoc | 0 | 0:3.1.1-2.4.GA_CP05.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hornetq | 0 | 0:2.2.24-1.EAP.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | hornetq-native | 0 | 0:2.2.20-1.EAP.GA.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jacorb-jboss | 0 | 0:2.3.2-2.jboss_1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | javassist | 0 | 0:3.12.0-6.SP1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-aop2 | 0 | 0:2.1.6-5.CP06.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-bootstrap | 0 | 0:1.0.2-1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cache-core | 0 | 0:3.2.11-1.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cache-pojo | 0 | 0:3.0.1-1.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cl | 0 | 0:2.0.11-1.GA.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-cluster-ha-server-api | 0 | 0:1.2.1-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-common-beans | 0 | 0:1.0.1-2.1.Final.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-common-core | 0 | 0:2.2.21-1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-eap5-native | 0 | 0:5.2.0-6.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb-3.0-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-cache | 0 | 0:1.0.0-4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-core | 0 | 0:1.3.9-0.4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-ext-api | 0 | 0:1.0.0-4.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-ext-api-impl | 0 | 0:1.0.0-3.7.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-interceptors | 0 | 0:1.0.9-0.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-metadata | 0 | 0:1.0.0-3.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-metrics-deployer | 0 | 0:1.1.1-0.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-security | 0 | 0:1.0.2-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout-3.0-api | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-timeout-spi | 0 | 0:0.1.1-0.5.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-ejb3-transactions | 0 | 0:1.0.2-1.4.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jacc-1.1-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jad-1.2-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jaspi-1.0-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-javaee | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-javaee-poms | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jaxrpc-api_1.1_spec | 0 | 0:1.0.0-16.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jca-1.5-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jms-1.1-api | 0 | 0:5.0.2-2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-jpa-deployers | 0 | 0:1.0.0-6.1SP2.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-logmanager | 0 | 0:1.1.2-6.GA_patch_01.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-messaging | 0 | 0:1.4.8-12.SP9.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-naming | 0 | 0:5.0.3-5.1.CP02.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-reflect | 0 | 0:2.0.4-2.1.ep5.el5 |
| Red Hat:jboss_enterprise_application_platform:5::el5 | jboss-remoting | 0 | 0:2.5.4-10.SP4.1.ep5.el5 |
Related vulnerabilities
- CVE-2025-41249 The Spring Framework annotation detection mechanism may not correctly resolve annotations… Also affects org.springframework:spring-core
- CVE-2012-0874 The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss… Also affects aopalliance
- CVE-2012-3546 org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x… Also affects aopalliance
- CVE-2012-5887 The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before… Also affects jbossweb
- CVE-2012-0022 Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an… Also affects jbossweb
- CVE-2011-4858 Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash… Also affects jbossweb
- CVE-2010-4476 The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and… Also affects jbossweb
- CVE-2026-4433 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of… CWE-16