CVE-2016-4978: High severity Apache ActiveMQ Artemis vulnerability
A class implementing the Serializable interface is free to implement the “readObject(java.io.ObjectInputStream in)” method however it chooses. This readObject method is used during the deserialization process, when constructing a java object from a serialized byte stream. It is possible to implement the method in such a way that can result in java code being executed during the deserialization of an object of this class (gadget class).
The JMS specification outlines a getObject() method on the javax.jms.ObjectMessage class. The Apache Artemis implementation of this method allows deserialization of objects, from untrusted input. There are several places where Apache Artemis uses this getObject() method. In the JMS Core client, the Artemis broker and the Artemis REST component. These Artemis components may therefore be vulnerable to a remote code execution attack. Successful exploitations of this vulnerability rely on these "gadget classes" being present on the Artemis classpath and the sender of the untrusted input being authenticated and authorized to send messages to the Artemis broker.
Other sources
It was found that use of a JMS ObjectMessage does not safely handle user supplied data when deserializing objects. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.
The getObject method of the javax.jms.ObjectMessage class in the (1) JMS Core client, (2) Artemis broker, and (3) Artemis REST component in Apache ActiveMQ Artemis before 1.4.0 might allow remote authenticated users with permission to send messages to the Artemis broker to deserialize arbitrary objects and execute arbitrary code by leveraging gadget classes being present on the Artemis classpath.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/codehaus-jacksonto a version that resolves this vulnerability.Fixed in 0:1.9.9-12.redhat_6.1.ep6.el5 - Upgrade
Upgrade
redhat/hornetqto a version that resolves this vulnerability.Fixed in 0:2.3.25-26.SP24_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbosststo a version that resolves this vulnerability.Fixed in 1:4.17.43-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jbosswebto a version that resolves this vulnerability.Fixed in 0:7.5.28-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/jgroupsto a version that resolves this vulnerability.Fixed in 1:3.2.18-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/lucene-solrto a version that resolves this vulnerability.Fixed in 0:3.6.2-8.redhat_9.1.ep6.el5 - Upgrade
Upgrade
redhat/picketboxto a version that resolves this vulnerability.Fixed in 0:4.1.7-1.Final_redhat_1.1.ep6.el5 - Upgrade
Upgrade
redhat/codehaus-jacksonto a version that resolves this vulnerability.Fixed in 0:1.9.9-12.redhat_6.1.ep6.el6 - Upgrade
Upgrade
redhat/hornetqto a version that resolves this vulnerability.Fixed in 0:2.3.25-26.SP24_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbosststo a version that resolves this vulnerability.Fixed in 1:4.17.43-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jbosswebto a version that resolves this vulnerability.Fixed in 0:7.5.28-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jgroupsto a version that resolves this vulnerability.Fixed in 1:3.2.18-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/lucene-solrto a version that resolves this vulnerability.Fixed in 0:3.6.2-8.redhat_9.1.ep6.el6 - Upgrade
Upgrade
redhat/picketboxto a version that resolves this vulnerability.Fixed in 0:4.1.7-1.Final_redhat_1.1.ep6.el6 - Upgrade
Upgrade
redhat/jboss-ec2-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.ep6.el6 - Upgrade
Upgrade
redhat/codehaus-jacksonto a version that resolves this vulnerability.Fixed in 0:1.9.9-12.redhat_6.1.ep6.el7 - Upgrade
Upgrade
redhat/hornetqto a version that resolves this vulnerability.Fixed in 0:2.3.25-26.SP24_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-appclientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-bundlesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-clito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-client-allto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-clusteringto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-cmpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-connectorto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-controller-clientto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-coreto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-core-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-deployment-repositoryto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-deployment-scannerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-domainto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-domain-httpto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-domain-managementto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-eeto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-ee-deploymentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-ejb3to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-embeddedto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-host-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jacorbto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-javadocsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jaxrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jaxrsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jdrto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jpato a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jsfto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-jsr77to a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-loggingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-mailto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-management-client-contentto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-messagingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-modclusterto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-modules-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-namingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-networkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgito a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgi-configadminto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-osgi-serviceto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-picketlinkto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-platform-mbeanto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-pojoto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-process-controllerto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-product-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-protocolto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-remotingto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-sarto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-securityto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-serverto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-standaloneto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-system-jmxto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-threadsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-transactionsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-versionto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-webto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-webservicesto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbossas-welcome-content-eapto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-weldto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jboss-as-xtsto a version that resolves this vulnerability.Fixed in 0:7.5.20-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbosststo a version that resolves this vulnerability.Fixed in 1:4.17.43-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jbosswebto a version that resolves this vulnerability.Fixed in 0:7.5.28-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/jgroupsto a version that resolves this vulnerability.Fixed in 1:3.2.18-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/lucene-solrto a version that resolves this vulnerability.Fixed in 0:3.6.2-8.redhat_9.1.ep6.el7 - Upgrade
Upgrade
redhat/picketboxto a version that resolves this vulnerability.Fixed in 0:4.1.7-1.Final_redhat_1.1.ep6.el7 - Upgrade
Upgrade
redhat/eap7-activemq-artemisto a version that resolves this vulnerability.Fixed in 0:1.1.0-18.SP21_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-jsfto a version that resolves this vulnerability.Fixed in 0:2.2.12-2.SP4_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernateto a version that resolves this vulnerability.Fixed in 0:5.0.14-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-ironjacamarto a version that resolves this vulnerability.Fixed in 0:1.3.7-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-databindto a version that resolves this vulnerability.Fixed in 0:2.5.4-2.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-modulesto a version that resolves this vulnerability.Fixed in 0:1.5.4-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-remotingto a version that resolves this vulnerability.Fixed in 0:4.0.23-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.4.6-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-resteasyto a version that resolves this vulnerability.Fixed in 0:3.0.19-6.SP4_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildflyto a version that resolves this vulnerability.Fixed in 0:7.0.7-4.GA_redhat_3.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-javadocsto a version that resolves this vulnerability.Fixed in 0:7.0.7-3.GA_redhat_4.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-web-console-eapto a version that resolves this vulnerability.Fixed in 0:2.8.30-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-ec2-eapto a version that resolves this vulnerability.Fixed in 0:7.0.7-1.GA_redhat_1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-activemq-artemisto a version that resolves this vulnerability.Fixed in 0:1.1.0-18.SP21_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-jsfto a version that resolves this vulnerability.Fixed in 0:2.2.12-2.SP4_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernateto a version that resolves this vulnerability.Fixed in 0:5.0.14-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-ironjacamarto a version that resolves this vulnerability.Fixed in 0:1.3.7-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-databindto a version that resolves this vulnerability.Fixed in 0:2.5.4-2.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-modulesto a version that resolves this vulnerability.Fixed in 0:1.5.4-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-remotingto a version that resolves this vulnerability.Fixed in 0:4.0.23-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.4.6-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-resteasyto a version that resolves this vulnerability.Fixed in 0:3.0.19-6.SP4_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildflyto a version that resolves this vulnerability.Fixed in 0:7.0.7-4.GA_redhat_3.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-javadocsto a version that resolves this vulnerability.Fixed in 0:7.0.7-3.GA_redhat_4.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-web-console-eapto a version that resolves this vulnerability.Fixed in 0:2.8.30-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-ec2-eapto a version that resolves this vulnerability.Fixed in 0:7.0.7-1.GA_redhat_1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-activemq-artemisto a version that resolves this vulnerability.Fixed in 0:1.5.5.008-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-antlrto a version that resolves this vulnerability.Fixed in 0:2.7.7-35.redhat_7.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-commons-beanutilsto a version that resolves this vulnerability.Fixed in 0:1.9.3-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-commons-clito a version that resolves this vulnerability.Fixed in 0:1.3.1-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-commons-ioto a version that resolves this vulnerability.Fixed in 0:2.5.0-2.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-cxfto a version that resolves this vulnerability.Fixed in 0:3.1.12-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-cxf-xjc-utilsto a version that resolves this vulnerability.Fixed in 0:3.0.5-3.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-apache-mime4jto a version that resolves this vulnerability.Fixed in 0:0.6.0-2.redhat_6.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-artemis-nativeto a version that resolves this vulnerability.Fixed in 0:1.5.0-5.redhat_1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-artemis-wildfly-integrationto a version that resolves this vulnerability.Fixed in 0:1.0.2-3.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-azure-storageto a version that resolves this vulnerability.Fixed in 0:5.0.0-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-bouncycastleto a version that resolves this vulnerability.Fixed in 0:1.56.0-4.redhat_2.2.ep7.el6 - Upgrade
Upgrade
redhat/eap7-codehaus-jacksonto a version that resolves this vulnerability.Fixed in 0:1.9.13-7.redhat_4.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-commons-logging-jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:1.0.2-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-cryptacularto a version that resolves this vulnerability.Fixed in 0:1.2.0-3.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-ecjto a version that resolves this vulnerability.Fixed in 0:4.6.1-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-elytron-webto a version that resolves this vulnerability.Fixed in 0:1.0.1-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-concurrentto a version that resolves this vulnerability.Fixed in 0:1.0.0-3.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-elto a version that resolves this vulnerability.Fixed in 0:3.0.1-2.b08_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-jafto a version that resolves this vulnerability.Fixed in 0:1.1.1-21.redhat_5.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-javamailto a version that resolves this vulnerability.Fixed in 0:1.5.6-4.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-jaxbto a version that resolves this vulnerability.Fixed in 0:2.2.11-10.redhat_4.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-jsfto a version that resolves this vulnerability.Fixed in 0:2.2.13-5.SP4_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-glassfish-jsonto a version that resolves this vulnerability.Fixed in 0:1.0.4-4.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-guava-librariesto a version that resolves this vulnerability.Fixed in 0:20.0.0-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-h2databaseto a version that resolves this vulnerability.Fixed in 0:1.4.193-4.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernateto a version that resolves this vulnerability.Fixed in 0:5.1.10-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernate-commons-annotationsto a version that resolves this vulnerability.Fixed in 0:5.0.1-3.Final_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernate-jpato a version that resolves this vulnerability.Fixed in 2.1-api-0:1.0.0-3.Final_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernate-searchto a version that resolves this vulnerability.Fixed in 0:5.5.8-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-hibernate-validatorto a version that resolves this vulnerability.Fixed in 0:5.3.5-3.Final_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-httpcomponents-asyncclientto a version that resolves this vulnerability.Fixed in 0:4.1.2-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-httpcomponents-clientto a version that resolves this vulnerability.Fixed in 0:4.5.2-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-httpcomponents-coreto a version that resolves this vulnerability.Fixed in 0:4.4.4-2.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-infinispanto a version that resolves this vulnerability.Fixed in 0:8.2.8-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-ironjacamarto a version that resolves this vulnerability.Fixed in 0:1.4.6-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-annotationsto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-coreto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-databindto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-jaxrs-providersto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-module-jaxb-annotationsto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jackson-modules-java8to a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jandexto a version that resolves this vulnerability.Fixed in 0:2.0.3-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jansito a version that resolves this vulnerability.Fixed in 0:1.16.0-5.redhat_4.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-java-classmateto a version that resolves this vulnerability.Fixed in 0:1.3.3-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-javassistto a version that resolves this vulnerability.Fixed in 0:3.20.0-2.GA_redhat_3.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jaxbintrosto a version that resolves this vulnerability.Fixed in 0:1.0.2-19.GA_redhat_8.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jaxento a version that resolves this vulnerability.Fixed in 0:1.1.6-3.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jberetto a version that resolves this vulnerability.Fixed in 0:1.2.4-3.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-aeshto a version that resolves this vulnerability.Fixed in 0:0.66.19-2.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-classfilewriterto a version that resolves this vulnerability.Fixed in 0:1.2.1-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-dmrto a version that resolves this vulnerability.Fixed in 0:1.4.1-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-ejb3-ext-apito a version that resolves this vulnerability.Fixed in 0:2.2.0-4.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-ejb-clientto a version that resolves this vulnerability.Fixed in 0:4.0.9-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-genericjmsto a version that resolves this vulnerability.Fixed in 0:2.0.0-4.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-iiop-clientto a version that resolves this vulnerability.Fixed in 0:1.0.1-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-invocationto a version that resolves this vulnerability.Fixed in 0:1.5.0-5.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:2.0.7-3.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-marshallingto a version that resolves this vulnerability.Fixed in 0:2.0.2-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-metadatato a version that resolves this vulnerability.Fixed in 0:10.0.2-3.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-modulesto a version that resolves this vulnerability.Fixed in 0:1.6.0-11.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-openjdk-orbto a version that resolves this vulnerability.Fixed in 0:8.0.8-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-remotingto a version that resolves this vulnerability.Fixed in 0:5.0.5-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-remoting-jmxto a version that resolves this vulnerability.Fixed in 0:3.0.0-8.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-seam-intto a version that resolves this vulnerability.Fixed in 0:7.0.0-5.GA_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-security-xacmlto a version that resolves this vulnerability.Fixed in 0:2.0.8-16.Final_redhat_8.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-server-migrationto a version that resolves this vulnerability.Fixed in 0:1.0.3-4.Final_redhat_4.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-transaction-spito a version that resolves this vulnerability.Fixed in 0:7.6.0-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-vfsto a version that resolves this vulnerability.Fixed in 0:3.2.12-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-weldto a version that resolves this vulnerability.Fixed in 2.2-api-0:2.4.0-2.SP1_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jbossws-common-toolsto a version that resolves this vulnerability.Fixed in 0:1.2.4-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jbossws-cxfto a version that resolves this vulnerability.Fixed in 0:5.1.9-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jbossws-jaxws-undertow-httpspito a version that resolves this vulnerability.Fixed in 0:1.0.1-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jbossws-spito a version that resolves this vulnerability.Fixed in 0:3.1.4-3.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.5.4-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jettisonto a version that resolves this vulnerability.Fixed in 0:1.3.8-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jgroupsto a version that resolves this vulnerability.Fixed in 0:3.6.13-2.Final_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jgroups-azureto a version that resolves this vulnerability.Fixed in 0:1.1.0-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-joda-timeto a version that resolves this vulnerability.Fixed in 0:2.9.7-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jsoupto a version that resolves this vulnerability.Fixed in 0:1.8.3-3.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jul-to-slf4j-stubto a version that resolves this vulnerability.Fixed in 0:1.0.1-6.Final_redhat_3.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-mustache-javato a version that resolves this vulnerability.Fixed in 0:0.9.4-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-narayanato a version that resolves this vulnerability.Fixed in 0:5.5.30-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-neethito a version that resolves this vulnerability.Fixed in 0:3.0.3-3.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-nettyto a version that resolves this vulnerability.Fixed in 0:4.1.9-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-netty-xnio-transportto a version that resolves this vulnerability.Fixed in 0:0.1.2-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-objectweb-asmto a version that resolves this vulnerability.Fixed in 0:3.3.1-14.redhat_13.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-picketboxto a version that resolves this vulnerability.Fixed in 0:5.0.2-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-picketbox-commonsto a version that resolves this vulnerability.Fixed in 0:1.0.0-3.final_redhat_5.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-resteasyto a version that resolves this vulnerability.Fixed in 0:3.0.24-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-shibboleth-java-supportto a version that resolves this vulnerability.Fixed in 0:7.1.1-3.redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-slf4jto a version that resolves this vulnerability.Fixed in 0:1.7.22-2.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-snakeyamlto a version that resolves this vulnerability.Fixed in 0:1.17.0-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-staxmapperto a version that resolves this vulnerability.Fixed in 0:1.3.0-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-sun-saajto a version that resolves this vulnerability.Fixed in 1.3-impl-0:1.3.16-16.SP1_redhat_6.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-sun-ws-metadatato a version that resolves this vulnerability.Fixed in 2.0-api-0:1.0.0-6.MR1_redhat_8.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-tomcat-taglibs-standardto a version that resolves this vulnerability.Fixed in 0:1.2.6-1.RC1_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-undertowto a version that resolves this vulnerability.Fixed in 0:1.4.18-2.Final_redhat_2.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-undertow-jastowto a version that resolves this vulnerability.Fixed in 0:2.0.2-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-vdxto a version that resolves this vulnerability.Fixed in 0:1.1.6-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-weld-coreto a version that resolves this vulnerability.Fixed in 0:2.4.3-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildflyto a version that resolves this vulnerability.Fixed in 0:7.1.0-64.GA_redhat_11.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-client-configto a version that resolves this vulnerability.Fixed in 0:1.0.0-7.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-commonto a version that resolves this vulnerability.Fixed in 0:1.2.0-10.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-discoveryto a version that resolves this vulnerability.Fixed in 0:1.0.0-9.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-elytronto a version that resolves this vulnerability.Fixed in 0:1.1.7-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-elytron-toolto a version that resolves this vulnerability.Fixed in 0:1.0.5-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-http-clientto a version that resolves this vulnerability.Fixed in 0:1.0.8-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-javadocsto a version that resolves this vulnerability.Fixed in 0:7.1.0-27.GA_redhat_11.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-naming-clientto a version that resolves this vulnerability.Fixed in 0:1.0.7-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-opensslto a version that resolves this vulnerability.Fixed in 0:1.0.2-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-openssl-linuxto a version that resolves this vulnerability.Fixed in 0:1.0.2-13.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-transaction-clientto a version that resolves this vulnerability.Fixed in 0:1.0.2-1.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wildfly-web-console-eapto a version that resolves this vulnerability.Fixed in 0:2.9.15-2.Final_redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-woodstox-coreto a version that resolves this vulnerability.Fixed in 0:5.0.3-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-wss4jto a version that resolves this vulnerability.Fixed in 0:2.1.10-1.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-xml-securityto a version that resolves this vulnerability.Fixed in 0:2.0.8-2.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-xomto a version that resolves this vulnerability.Fixed in 0:1.2.10-2.redhat_1.1.ep7.el6 - Upgrade
Upgrade
redhat/eap7-jboss-ec2-eapto a version that resolves this vulnerability.Fixed in 0:7.1.0-5.GA_redhat_5.ep7.el6 - Upgrade
Upgrade
redhat/eap7-activemq-artemisto a version that resolves this vulnerability.Fixed in 0:1.5.5.008-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-antlrto a version that resolves this vulnerability.Fixed in 0:2.7.7-35.redhat_7.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-commons-beanutilsto a version that resolves this vulnerability.Fixed in 0:1.9.3-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-commons-clito a version that resolves this vulnerability.Fixed in 0:1.3.1-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-commons-ioto a version that resolves this vulnerability.Fixed in 0:2.5.0-2.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-cxfto a version that resolves this vulnerability.Fixed in 0:3.1.12-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-cxf-xjc-utilsto a version that resolves this vulnerability.Fixed in 0:3.0.5-3.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-apache-mime4jto a version that resolves this vulnerability.Fixed in 0:0.6.0-2.redhat_6.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-artemis-nativeto a version that resolves this vulnerability.Fixed in 0:1.5.0-5.redhat_1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-artemis-wildfly-integrationto a version that resolves this vulnerability.Fixed in 0:1.0.2-3.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-azure-storageto a version that resolves this vulnerability.Fixed in 0:5.0.0-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-bouncycastleto a version that resolves this vulnerability.Fixed in 0:1.56.0-4.redhat_2.2.ep7.el7 - Upgrade
Upgrade
redhat/eap7-codehaus-jacksonto a version that resolves this vulnerability.Fixed in 0:1.9.13-7.redhat_4.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-commons-logging-jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:1.0.2-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-cryptacularto a version that resolves this vulnerability.Fixed in 0:1.2.0-3.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-ecjto a version that resolves this vulnerability.Fixed in 0:4.6.1-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-elytron-webto a version that resolves this vulnerability.Fixed in 0:1.0.1-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-concurrentto a version that resolves this vulnerability.Fixed in 0:1.0.0-3.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-elto a version that resolves this vulnerability.Fixed in 0:3.0.1-2.b08_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-jafto a version that resolves this vulnerability.Fixed in 0:1.1.1-21.redhat_5.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-javamailto a version that resolves this vulnerability.Fixed in 0:1.5.6-4.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-jaxbto a version that resolves this vulnerability.Fixed in 0:2.2.11-10.redhat_4.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-jsfto a version that resolves this vulnerability.Fixed in 0:2.2.13-5.SP4_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-glassfish-jsonto a version that resolves this vulnerability.Fixed in 0:1.0.4-4.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-guava-librariesto a version that resolves this vulnerability.Fixed in 0:20.0.0-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-h2databaseto a version that resolves this vulnerability.Fixed in 0:1.4.193-4.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernateto a version that resolves this vulnerability.Fixed in 0:5.1.10-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernate-commons-annotationsto a version that resolves this vulnerability.Fixed in 0:5.0.1-3.Final_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernate-jpato a version that resolves this vulnerability.Fixed in 2.1-api-0:1.0.0-3.Final_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernate-searchto a version that resolves this vulnerability.Fixed in 0:5.5.8-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-hibernate-validatorto a version that resolves this vulnerability.Fixed in 0:5.3.5-3.Final_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-httpcomponents-asyncclientto a version that resolves this vulnerability.Fixed in 0:4.1.2-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-httpcomponents-clientto a version that resolves this vulnerability.Fixed in 0:4.5.2-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-httpcomponents-coreto a version that resolves this vulnerability.Fixed in 0:4.4.4-2.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-infinispanto a version that resolves this vulnerability.Fixed in 0:8.2.8-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-ironjacamarto a version that resolves this vulnerability.Fixed in 0:1.4.6-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-annotationsto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-coreto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-databindto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-jaxrs-providersto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-module-jaxb-annotationsto a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jackson-modules-java8to a version that resolves this vulnerability.Fixed in 0:2.8.9-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jandexto a version that resolves this vulnerability.Fixed in 0:2.0.3-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jansito a version that resolves this vulnerability.Fixed in 0:1.16.0-5.redhat_4.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-java-classmateto a version that resolves this vulnerability.Fixed in 0:1.3.3-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-javassistto a version that resolves this vulnerability.Fixed in 0:3.20.0-2.GA_redhat_3.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jaxbintrosto a version that resolves this vulnerability.Fixed in 0:1.0.2-19.GA_redhat_8.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jaxento a version that resolves this vulnerability.Fixed in 0:1.1.6-3.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jberetto a version that resolves this vulnerability.Fixed in 0:1.2.4-3.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-aeshto a version that resolves this vulnerability.Fixed in 0:0.66.19-2.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-classfilewriterto a version that resolves this vulnerability.Fixed in 0:1.2.1-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-dmrto a version that resolves this vulnerability.Fixed in 0:1.4.1-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-ejb3-ext-apito a version that resolves this vulnerability.Fixed in 0:2.2.0-4.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-ejb-clientto a version that resolves this vulnerability.Fixed in 0:4.0.9-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-genericjmsto a version that resolves this vulnerability.Fixed in 0:2.0.0-4.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-iiop-clientto a version that resolves this vulnerability.Fixed in 0:1.0.1-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-invocationto a version that resolves this vulnerability.Fixed in 0:1.5.0-5.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-logmanagerto a version that resolves this vulnerability.Fixed in 0:2.0.7-3.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-marshallingto a version that resolves this vulnerability.Fixed in 0:2.0.2-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-metadatato a version that resolves this vulnerability.Fixed in 0:10.0.2-3.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-modulesto a version that resolves this vulnerability.Fixed in 0:1.6.0-11.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-openjdk-orbto a version that resolves this vulnerability.Fixed in 0:8.0.8-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-remotingto a version that resolves this vulnerability.Fixed in 0:5.0.5-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-remoting-jmxto a version that resolves this vulnerability.Fixed in 0:3.0.0-8.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-seam-intto a version that resolves this vulnerability.Fixed in 0:7.0.0-5.GA_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-security-xacmlto a version that resolves this vulnerability.Fixed in 0:2.0.8-16.Final_redhat_8.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-server-migrationto a version that resolves this vulnerability.Fixed in 0:1.0.3-4.Final_redhat_4.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-transaction-spito a version that resolves this vulnerability.Fixed in 0:7.6.0-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-vfsto a version that resolves this vulnerability.Fixed in 0:3.2.12-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-weldto a version that resolves this vulnerability.Fixed in 2.2-api-0:2.4.0-2.SP1_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jbossws-common-toolsto a version that resolves this vulnerability.Fixed in 0:1.2.4-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jbossws-cxfto a version that resolves this vulnerability.Fixed in 0:5.1.9-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jbossws-jaxws-undertow-httpspito a version that resolves this vulnerability.Fixed in 0:1.0.1-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jbossws-spito a version that resolves this vulnerability.Fixed in 0:3.1.4-3.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-xnio-baseto a version that resolves this vulnerability.Fixed in 0:3.5.4-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jettisonto a version that resolves this vulnerability.Fixed in 0:1.3.8-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jgroupsto a version that resolves this vulnerability.Fixed in 0:3.6.13-2.Final_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jgroups-azureto a version that resolves this vulnerability.Fixed in 0:1.1.0-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-joda-timeto a version that resolves this vulnerability.Fixed in 0:2.9.7-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jsoupto a version that resolves this vulnerability.Fixed in 0:1.8.3-3.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jul-to-slf4j-stubto a version that resolves this vulnerability.Fixed in 0:1.0.1-6.Final_redhat_3.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-mustache-javato a version that resolves this vulnerability.Fixed in 0:0.9.4-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-narayanato a version that resolves this vulnerability.Fixed in 0:5.5.30-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-neethito a version that resolves this vulnerability.Fixed in 0:3.0.3-3.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-nettyto a version that resolves this vulnerability.Fixed in 0:4.1.9-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-netty-xnio-transportto a version that resolves this vulnerability.Fixed in 0:0.1.2-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-objectweb-asmto a version that resolves this vulnerability.Fixed in 0:3.3.1-14.redhat_13.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-picketboxto a version that resolves this vulnerability.Fixed in 0:5.0.2-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-picketbox-commonsto a version that resolves this vulnerability.Fixed in 0:1.0.0-3.final_redhat_5.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-resteasyto a version that resolves this vulnerability.Fixed in 0:3.0.24-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-shibboleth-java-supportto a version that resolves this vulnerability.Fixed in 0:7.1.1-3.redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-slf4jto a version that resolves this vulnerability.Fixed in 0:1.7.22-2.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-snakeyamlto a version that resolves this vulnerability.Fixed in 0:1.17.0-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-staxmapperto a version that resolves this vulnerability.Fixed in 0:1.3.0-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-sun-saajto a version that resolves this vulnerability.Fixed in 1.3-impl-0:1.3.16-16.SP1_redhat_6.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-sun-ws-metadatato a version that resolves this vulnerability.Fixed in 2.0-api-0:1.0.0-6.MR1_redhat_8.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-tomcat-taglibs-standardto a version that resolves this vulnerability.Fixed in 0:1.2.6-1.RC1_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-undertowto a version that resolves this vulnerability.Fixed in 0:1.4.18-2.Final_redhat_2.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-undertow-jastowto a version that resolves this vulnerability.Fixed in 0:2.0.2-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-vdxto a version that resolves this vulnerability.Fixed in 0:1.1.6-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-weld-coreto a version that resolves this vulnerability.Fixed in 0:2.4.3-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildflyto a version that resolves this vulnerability.Fixed in 0:7.1.0-64.GA_redhat_11.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-client-configto a version that resolves this vulnerability.Fixed in 0:1.0.0-7.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-commonto a version that resolves this vulnerability.Fixed in 0:1.2.0-10.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-discoveryto a version that resolves this vulnerability.Fixed in 0:1.0.0-9.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-elytronto a version that resolves this vulnerability.Fixed in 0:1.1.7-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-elytron-toolto a version that resolves this vulnerability.Fixed in 0:1.0.5-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-http-clientto a version that resolves this vulnerability.Fixed in 0:1.0.8-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-javadocsto a version that resolves this vulnerability.Fixed in 0:7.1.0-27.GA_redhat_11.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-naming-clientto a version that resolves this vulnerability.Fixed in 0:1.0.7-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-opensslto a version that resolves this vulnerability.Fixed in 0:1.0.2-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-openssl-linuxto a version that resolves this vulnerability.Fixed in 0:1.0.2-13.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-transaction-clientto a version that resolves this vulnerability.Fixed in 0:1.0.2-1.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wildfly-web-console-eapto a version that resolves this vulnerability.Fixed in 0:2.9.15-2.Final_redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-woodstox-coreto a version that resolves this vulnerability.Fixed in 0:5.0.3-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-wss4jto a version that resolves this vulnerability.Fixed in 0:2.1.10-1.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-xml-securityto a version that resolves this vulnerability.Fixed in 0:2.0.8-2.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-xomto a version that resolves this vulnerability.Fixed in 0:1.2.10-2.redhat_1.1.ep7.el7 - Upgrade
Upgrade
redhat/eap7-jboss-ec2-eapto a version that resolves this vulnerability.Fixed in 0:7.1.0-5.GA_redhat_5.ep7.el7 - Upgrade
Upgrade
maven/org.apache.activemq:artemis-pomto a version that resolves this vulnerability.Fixed in 1.4.0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2016-4978?
CVE-2016-4978 has a medium severity level, which means it is a moderate risk that could lead to potential vulnerabilities.
How do I fix CVE-2016-4978?
To fix CVE-2016-4978, update to the patched versions of the affected software packages as specified by Red Hat.
Which software is affected by CVE-2016-4978?
CVE-2016-4978 affects several Red Hat packages, including codehaus-jackson, hornetq, and various JBoss components.
Is CVE-2016-4978 a remote code execution vulnerability?
CVE-2016-4978 could potentially lead to remote code execution due to improper deserialization mechanisms.
What are some common mitigations for CVE-2016-4978?
Common mitigations for CVE-2016-4978 include reviewing and controlling deserialization processes and restricting access to sensitive components.