CVE-2012-2687
NoneCVSS
—
EPSS
22.5%
Published
Aug 22, 2012
CISA due date
—
The record
Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled, allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is not properly handled during construction of a variant list.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | apache2 | 0 | 2.2.22-8 |
| Debian:11 | apache2 | 0 | 2.2.22-8 |
| Debian:12 | apache2 | 0 | 2.2.22-8 |
| Debian:13 | apache2 | 0 | 2.2.22-8 |
| Red Hat:enterprise_linux:5::client | httpd | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client | httpd-debuginfo | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client | httpd-devel | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client | httpd-manual | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client | mod_ssl | 0 | 1:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client_workstation | httpd | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client_workstation | httpd-debuginfo | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client_workstation | httpd-devel | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client_workstation | httpd-manual | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::client_workstation | mod_ssl | 0 | 1:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::server | httpd | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::server | httpd-debuginfo | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::server | httpd-devel | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::server | httpd-manual | 0 | 0:2.2.3-74.el5 |
| Red Hat:enterprise_linux:5::server | mod_ssl | 0 | 1:2.2.3-74.el5 |
| Red Hat:enterprise_linux:6::client | httpd | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::client | httpd-debuginfo | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::client | httpd-devel | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::client | httpd-manual | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::client | httpd-tools | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::client | mod_ssl | 0 | 1:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | httpd | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | httpd-debuginfo | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | httpd-devel | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | httpd-manual | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | httpd-tools | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::computenode | mod_ssl | 0 | 1:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | httpd | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | httpd-debuginfo | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | httpd-devel | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | httpd-manual | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | httpd-tools | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::server | mod_ssl | 0 | 1:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | httpd | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | httpd-debuginfo | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | httpd-devel | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | httpd-manual | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | httpd-tools | 0 | 0:2.2.15-26.el6 |
| Red Hat:enterprise_linux:6::workstation | mod_ssl | 0 | 1:2.2.15-26.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | antlr-eap6 | 0 | 0:2.7.7-15_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-beanutils | 0 | 0:1.8.3-10.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-cli | 0 | 0:1.2-7.5.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-codec-eap6 | 0 | 0:1.4-14.redhat_2.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-collections | 0 | 0:3.2.1-10.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-collections-eap6 | 0 | 0:3.2.1-13.redhat_2.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-configuration | 0 | 0:1.6-7.2.redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-daemon-jsvc-eap6 | 0 | 1:1.0.10-3.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-daemon-jsvc-eap6-debuginfo | 0 | 1:1.0.10-3.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-io-eap6 | 0 | 0:2.1-6.redhat_2.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-lang | 0 | 0:2.6-3.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-lang-eap6 | 0 | 0:2.6-5redhat_2.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-commons-pool-eap6 | 0 | 0:1.5.6-8.redhat_2.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-cxf | 0 | 0:2.4.9-4.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-cxf-xjc-utils | 0 | 0:2.4.0-11.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-mime4j | 0 | 0:0.6-7.redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | atinject | 0 | 0:1-8.2_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | cal10n | 0 | 0:0.7.3-8.redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson | 0 | 0:1.9.2-6_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-core-asl | 0 | 0:1.9.2-6_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-jaxrs | 0 | 0:1.9.2-6_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-mapper-asl | 0 | 0:1.9.2-6_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | codehaus-jackson-xc | 0 | 0:1.9.2-6_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | cxf-xjc-boolean | 0 | 0:2.4.0-11.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | cxf-xjc-dv | 0 | 0:2.4.0-11.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | cxf-xjc-ts | 0 | 0:2.4.0-11.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | dom4j | 0 | 0:1.6.1-14_redhat_3.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | glassfish-jaf | 0 | 0:1.1.1-16.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | glassfish-javamail | 0 | 0:1.4.4-16.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | glassfish-jaxb | 0 | 0:2.2.5-10_redhat_3.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | glassfish-jsf | 0 | 0:2.1.13-1_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | glassfish-jsf12 | 0 | 0:1.2_15-9_b01_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | gnu-getopt | 0 | 0:1.0.13-1.2_redhat_2.ep6.el5.5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | guava | 0 | 0:11.0.2-0.5.redhat_2.ep6.el5.6 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | guava-libraries | 0 | 0:11.0.2-0.5.redhat_2.ep6.el5.6 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | h2database | 0 | 0:1.3.168-2_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate-beanvalidation-api | 0 | 0:1.0.0-4.7.GA_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate-jpa-2.0-api | 0 | 0:1.0.1-5.Final_redhat_2.1.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate3-commons-annotations | 0 | 0:4.0.1-5.Final_redhat_2.1.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4 | 0 | 0:4.1.6-3.5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-core | 0 | 0:4.1.6-3.5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-entitymanager | 0 | 0:4.1.6-3.5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-envers | 0 | 0:4.1.6-3.5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-infinispan | 0 | 0:4.1.6-3.5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hibernate4-validator | 0 | 0:4.2.0-7.Final_redhat_2.1.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hornetq | 0 | 0:2.2.23-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hornetq-native | 0 | 0:2.2.21-1.1.Final.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hornetq-native-debuginfo | 0 | 0:2.2.21-1.1.Final.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpcomponents | 0 | 0:5-4_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpcomponents-httpclient | 0 | 0:4.1.3-4_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpcomponents-httpcore | 0 | 0:4.1.4-4_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpd | 0 | 0:2.2.22-14.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpd-debuginfo | 0 | 0:2.2.22-14.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpd-devel | 0 | 0:2.2.22-14.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpd-tools | 0 | 0:2.2.22-14.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | httpserver | 0 | 0:1.0.1-3.Final_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan | 0 | 0:5.1.8-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-jdbc | 0 | 0:5.1.8-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-remote | 0 | 0:5.1.8-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-client-hotrod | 0 | 0:5.1.8-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-core | 0 | 0:5.1.8-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | ironjacamar | 0 | 0:1.0.13-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jacorb-jboss | 0 | 0:2.3.2-3.redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jandex | 0 | 0:1.0.3-7.Final_redhat_2.ep6.el5.2 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | javassist | 0 | 0:3.15.0-5.GA_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | javassist-eap6 | 0 | 0:3.15.0-5.GA_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jaxbintros | 0 | 0:1.0.2-11.GA_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jaxen | 0 | 0:1.1.3-8.redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jaxws-jboss-httpserver-httpspi | 0 | 0:1.0.1-3.GA_redhat_2.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-deployment | 0 | 0:1.1.0-2.Final_redhat_3.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-framework-core | 0 | 0:1.3.1-3.CR1_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-metadata | 0 | 0:2.1.0-2.Final_redhat_3.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-repository | 0 | 0:1.2.0-2.Final_redhat_2.ep6.el5.2 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-resolver | 0 | 0:2.1.0-2.Final_redhat_3.ep6.el5.3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-spi | 0 | 0:3.1.0-3.Final_redhat_3.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbosgi-vfs | 0 | 0:1.1.0-2.Final_redhat_2.ep6.el5.2 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-annotations-api_1.1_spec | 0 | 0:1.0.1-3.2.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-appclient | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cli | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-client-all | 0 | 0:7.1.3-4.1.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-clustering | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cmp | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-configadmin | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-connector | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-console | 0 | 0:1.4.2-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller-client | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-repository | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-scanner | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-http | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-management | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee-deployment | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ejb3 | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-embedded | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-host-controller | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jacorb | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxr | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxrs | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jdr | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jmx | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jpa | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsf | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsr77 | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-logging | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-mail | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-management-client-content | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-messaging | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-modcluster | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-naming | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-network | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-configadmin | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-service | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-platform-mbean | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-pojo | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-process-controller | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-protocol | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-remoting | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-sar | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-security | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-server | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-threads | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-transactions | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-web | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-webservices | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-weld | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-xts | 0 | 0:7.1.3-4.Final_redhat_4.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-classfilewriter | 0 | 0:1.0.3-2.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-common-beans | 0 | 0:1.0.0-5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-common-core | 0 | 1:2.2.17-10.GA_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-connector-api_1.6_spec | 0 | 0:1.0.1-3.3.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-dmr | 0 | 0:1.1.1-8.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-ejb-api_3.1_spec | 0 | 0:1.0.2-10.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-ejb-client | 0 | 0:1.0.11-2.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-ejb3-ext-api | 0 | 0:2.0.0-9.redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-el-api_2.2_spec | 0 | 0:1.0.2-2.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-iiop-client | 0 | 0:1.0.0-4.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-interceptors-api_1.1_spec | 0 | 0:1.0.1-4.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-invocation | 0 | 0:1.1.1-5.Final_redhat_2.ep6.el5.4 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-j2eemgmt-api_1.1_spec | 0 | 0:1.0.1-5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jacc-api_1.4_spec | 0 | 0:1.0.2-5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jad-api_1.2_spec | 0 | 0:1.0.1-6.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaspi-api_1.0_spec | 0 | 0:1.0.1-6.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaxb-api_2.2_spec | 0 | 0:1.0.4-3.Final_redhat_2.1.ep6.el5.1 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaxr-api_1.0_spec | 0 | 0:1.0.2-4.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaxrpc-api_1.1_spec | 0 | 0:1.0.1-4.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaxrs-api_1.1_spec | 0 | 0:1.0.1-4.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jaxws-api_2.2_spec | 0 | 0:2.0.1-5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jms-api_1.1_spec | 0 | 0:1.0.1-4.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jsf-api_2.1_spec | 0 | 0:2.0.7-1.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jsp-api_2.2_spec | 0 | 0:1.0.1-5.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-jstl-api_1.2_spec | 0 | 0:1.0.3-3.Final_redhat_2.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-logging | 0 | 0:3.1.2-3.GA_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-logmanager | 0 | 0:1.3.2-2.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-marshalling | 0 | 0:1.3.15-2.GA_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata | 0 | 0:7.0.4-2.Final_redhat_1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-metadata-appclient | 0 | 0:7.0.4-2.Final_redhat_1.ep6.el5 |
Related vulnerabilities
- CVE-2015-0228 The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP… Also affects apache2
- CVE-2014-3583 The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the… Also affects apache2
- CVE-2013-4352 The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in… Also affects apache2
- CVE-2013-5704 The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass… Also affects apache2
- CVE-2013-1896 mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV… Also affects apache2
- CVE-2013-1862 mod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25… Also affects apache2
- CVE-2012-3499 Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x… Also affects apache2
- CVE-2012-4558 Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in… Also affects apache2