CVE-2016-6816
High · 7.1CVSS
7.1
EPSS
39.6%
Published
Mar 20, 2017
CISA due date
—
The record
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.tomcat:tomcat-coyote | 6.0.0 | 6.0.48 |
| Maven | org.apache.tomcat:tomcat-coyote | 7.0.0 | 7.0.73 |
| Maven | org.apache.tomcat:tomcat-coyote | 8.0.0RC1 | 8.0.39 |
| Maven | org.apache.tomcat:tomcat-coyote | 8.5.0 | 8.5.8 |
| Maven | org.apache.tomcat:tomcat-coyote | 9.0.0.M1 | 9.0.0.M12 |
| Debian:7 | tomcat6 | 0 | 6.0.45+dfsg-1~deb7u3 |
| Debian:7 | tomcat7 | 0 | 7.0.28-4+deb7u7 |
| Debian:8 | tomcat7 | 0 | 7.0.56-3+deb8u6 |
| Debian:8 | tomcat8 | 0 | 8.0.14-1+deb8u5 |
| Mageia:5 | tomcat | 0 | 7.0.73-1.mga5 |
| Red Hat:enterprise_linux:6::client | tomcat6 | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-admin-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-docs-webapp | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-el-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-javadoc | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-jsp-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-lib | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-servlet-2.5-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::client | tomcat6-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6 | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-admin-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-docs-webapp | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-el-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-javadoc | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-jsp-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-lib | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-servlet-2.5-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::computenode | tomcat6-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6 | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-admin-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-docs-webapp | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-el-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-javadoc | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-jsp-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-lib | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-servlet-2.5-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::server | tomcat6-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6 | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-admin-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-docs-webapp | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-el-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-javadoc | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-jsp-2.1-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-lib | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-servlet-2.5-api | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:6::workstation | tomcat6-webapps | 0 | 0:6.0.24-105.el6_8 |
| Red Hat:enterprise_linux:7::client | tomcat | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-admin-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-docs-webapp | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-el-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-javadoc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-jsp-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-jsvc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-lib | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-servlet-3.0-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::client | tomcat-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-admin-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-docs-webapp | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-el-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-javadoc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-jsp-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-jsvc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-lib | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-servlet-3.0-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::computenode | tomcat-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-admin-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-docs-webapp | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-el-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-javadoc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-jsp-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-jsvc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-lib | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-servlet-3.0-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::server | tomcat-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-admin-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-docs-webapp | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-el-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-javadoc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-jsp-2.2-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-jsvc | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-lib | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-servlet-3.0-api | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:enterprise_linux:7::workstation | tomcat-webapps | 0 | 0:7.0.69-11.el7_3 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | apache-cxf | 0 | 0:2.7.18-5.SP4_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | hornetq | 0 | 0:2.3.25-18.SP16_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-jdbc | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-cachestore-remote | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-client-hotrod | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | infinispan-core | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-appclient | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cli | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-client-all | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-clustering | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-cmp | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-configadmin | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-connector | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-console | 0 | 0:2.5.15-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-controller-client | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-core-security | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-repository | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-deployment-scanner | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-http | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-domain-management | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ee-deployment | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-ejb3 | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-embedded | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-host-controller | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jacorb | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxr | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jaxrs | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jdr | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jmx | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jpa | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsf | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-jsr77 | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-logging | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-mail | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-management-client-content | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-messaging | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-modcluster | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-naming | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-network | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-configadmin | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-osgi-service | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-picketlink | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-platform-mbean | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-pojo | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-process-controller | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-protocol | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-remoting | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-sar | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-security | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-server | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-system-jmx | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-threads | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-transactions | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-version | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-web | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-webservices | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-weld | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-as-xts | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-ejb-client | 0 | 0:1.0.38-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jboss-hal | 0 | 0:2.5.15-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-appclient | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-bundles | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-core | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-domain | 0 | 0:7.5.13-5.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-javadocs | 0 | 0:7.5.13-3.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-modules-eap | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-product-eap | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-standalone | 0 | 0:7.5.13-5.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossas-welcome-content-eap | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | jbossweb | 0 | 0:7.5.20-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el5 | resteasy | 0 | 0:2.3.16-1.Final_redhat_1.1.ep6.el5 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | apache-cxf | 0 | 0:2.7.18-5.SP4_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | hornetq | 0 | 0:2.3.25-18.SP16_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-cachestore-jdbc | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-cachestore-remote | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-client-hotrod | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | infinispan-core | 0 | 0:5.2.20-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-appclient | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-cli | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-client-all | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-clustering | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-cmp | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-configadmin | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-connector | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-console | 0 | 0:2.5.15-1.Final_redhat_1.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-controller | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-controller-client | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-core-security | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-deployment-repository | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-deployment-scanner | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-domain-http | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-domain-management | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ee | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ee-deployment | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-ejb3 | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-embedded | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-host-controller | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jacorb | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jaxr | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jaxrs | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jdr | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jmx | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jpa | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jsf | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-jsr77 | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-logging | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-mail | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-management-client-content | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
| Red Hat:jboss_enterprise_application_platform:6::el6 | jboss-as-messaging | 0 | 0:7.5.13-2.Final_redhat_2.1.ep6.el6 |
Related vulnerabilities
- CVE-2025-48989 Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat… Also affects org.apache.tomcat:tomcat-coyote
- CVE-2025-53506 Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Also affects org.apache.tomcat:tomcat-coyote
- CVE-2025-31650 Apache Tomcat Denial of Service via invalid HTTP priority header Also affects org.apache.tomcat:tomcat-coyote
- CVE-2024-52317 Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect… Also affects org.apache.tomcat:tomcat-coyote
- CVE-2024-34750 Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption… Also affects org.apache.tomcat:tomcat-coyote
- CVE-2024-24549 Denial of Service due to improper input validation vulnerability for HTTP/2 requests in… Also affects org.apache.tomcat:tomcat-coyote
- CVE-2023-44487 The HTTP/2 protocol allows a denial of service (server resource consumption) because… Also affects org.apache.tomcat:tomcat-coyote
- CVE-2023-24998 Apache Commons FileUpload before 1.5 does not limit the number of request parts to be… Also affects org.apache.tomcat:tomcat-coyote