CVE-2022-25647: Deserialization of Untrusted Data

Published May 1, 2022
·
Updated

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes. This issue may lead to availability attacks.

Other sources

Google Gson is vulnerable to a denial of service, caused by the deserialization of untrusted data. By using the writeReplace() method, a remote attacker could exploit this vulnerability to cause a denial of service.

— IBM

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

— Ubuntu

Affected Software

237 affected componentsFixes available
redhat/jenkins<2-plugins-0:4.13.1684911916-1.el8
2-plugins-0:4.13.1684911916-1.el8
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el8ea
0:2.8.9-1.redhat_00001.1.el8ea
redhat/eap7<0:1-18.el9ea
0:1-18.el9ea
redhat/eap7-activemq-artemis<0:2.16.0-9.redhat_00042.1.el9ea
0:2.16.0-9.redhat_00042.1.el9ea
redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el9ea
1:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-aesh-extensions<0:1.8.0-1.redhat_00001.1.el9ea
0:1.8.0-1.redhat_00001.1.el9ea
redhat/eap7-aesh-readline<0:2.2.0-1.redhat_00001.1.el9ea
0:2.2.0-1.redhat_00001.1.el9ea
redhat/eap7-agroal<0:1.3.0-1.redhat_00001.1.el9ea
0:1.3.0-1.redhat_00001.1.el9ea
redhat/eap7-antlr<0:2.7.7-54.redhat_7.1.el9ea
0:2.7.7-54.redhat_7.1.el9ea
redhat/eap7-apache-commons-beanutils<0:1.9.4-1.redhat_00002.1.el9ea
0:1.9.4-1.redhat_00002.1.el9ea
redhat/eap7-apache-commons-cli<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-codec<0:1.15.0-1.redhat_00001.1.el9ea
0:1.15.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-collections<0:3.2.2-9.redhat_2.1.el9ea
0:3.2.2-9.redhat_2.1.el9ea
redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el9ea
0:2.10.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang<0:3.11.0-1.redhat_00001.1.el9ea
0:3.11.0-1.redhat_00001.1.el9ea
redhat/eap7-apache-commons-lang2<0:2.6.0-1.redhat_7.1.el9ea
0:2.6.0-1.redhat_7.1.el9ea
redhat/eap7-apache-cxf<0:3.3.13-1.redhat_00001.1.el9ea
0:3.3.13-1.redhat_00001.1.el9ea
redhat/eap7-apache-cxf-xjc-utils<0:3.3.1-1.1.redhat_00001.1.el9ea
0:3.3.1-1.1.redhat_00001.1.el9ea
redhat/eap7-apache-mime4j<0:0.6.0-4.1.redhat_7.1.el9ea
0:0.6.0-4.1.redhat_7.1.el9ea
redhat/eap7-apache-sshd<0:2.7.0-1.redhat_00001.1.el9ea
0:2.7.0-1.redhat_00001.1.el9ea
redhat/eap7-artemis-native<1:1.0.2-3.redhat_1.el9ea
1:1.0.2-3.redhat_1.el9ea
redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el9ea
0:1.0.4-1.redhat_00001.1.el9ea
redhat/eap7-atinject<0:1.0.3-1.redhat_00001.1.el9ea
0:1.0.3-1.redhat_00001.1.el9ea
redhat/eap7-avro<0:1.7.6-7.1.redhat_2.1.el9ea
0:1.7.6-7.1.redhat_2.1.el9ea
redhat/eap7-azure-storage<0:8.6.6-1.1.redhat_00001.1.el9ea
0:8.6.6-1.1.redhat_00001.1.el9ea
redhat/eap7-bouncycastle<0:1.68.0-2.redhat_00005.1.el9ea
0:1.68.0-2.redhat_00005.1.el9ea
redhat/eap7-byte-buddy<0:1.11.12-2.redhat_00002.1.el9ea
0:1.11.12-2.redhat_00002.1.el9ea
redhat/eap7-caffeine<0:2.8.8-1.redhat_00001.1.el9ea
0:2.8.8-1.redhat_00001.1.el9ea
redhat/eap7-cal10n<0:0.8.1-6.redhat_1.1.el9ea
0:0.8.1-6.redhat_1.1.el9ea
redhat/eap7-codehaus-jackson<0:1.9.13-10.redhat_00007.1.el9ea
0:1.9.13-10.redhat_00007.1.el9ea
redhat/eap7-commons-logging-jboss-logging<0:1.0.0-1.Final_redhat_1.1.el9ea
0:1.0.0-1.Final_redhat_1.1.el9ea
redhat/eap7-cryptacular<0:1.2.4-1.redhat_00001.1.el9ea
0:1.2.4-1.redhat_00001.1.el9ea
redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el9ea
0:2.1.3-1.redhat_00001.1.el9ea
redhat/eap7-ecj<1:3.26.0-1.redhat_00002.1.el9ea
1:3.26.0-1.redhat_00002.1.el9ea
redhat/eap7-eclipse-jgit<0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
redhat/eap7-elytron-web<0:1.9.2-2.Final_redhat_00001.1.el9ea
0:1.9.2-2.Final_redhat_00001.1.el9ea
redhat/eap7-fge-btf<0:1.2.0-1.redhat_00007.1.el9ea
0:1.2.0-1.redhat_00007.1.el9ea
redhat/eap7-fge-msg-simple<0:1.1.0-1.redhat_00007.1.el9ea
0:1.1.0-1.redhat_00007.1.el9ea
redhat/eap7-glassfish-concurrent<0:1.1.1-1.redhat_00001.1.el9ea
0:1.1.1-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-fastinfoset<0:1.2.13-11.1.redhat_1.1.el9ea
0:1.2.13-11.1.redhat_1.1.el9ea
redhat/eap7-glassfish-jaf<0:1.2.2-1.redhat_00001.1.el9ea
0:1.2.2-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-javamail<0:1.6.5-1.redhat_00001.1.el9ea
0:1.6.5-1.redhat_00001.1.el9ea
redhat/eap7-glassfish-jaxb<0:2.3.3-4.1.b02_redhat_00001.1.el9ea
0:2.3.3-4.1.b02_redhat_00001.1.el9ea
redhat/eap7-glassfish-jsf<0:2.3.14-4.SP05_redhat_00001.1.el9ea
0:2.3.14-4.SP05_redhat_00001.1.el9ea
redhat/eap7-glassfish-json<0:1.1.6-2.redhat_00001.1.el9ea
0:1.1.6-2.redhat_00001.1.el9ea
redhat/eap7-gnu-getopt<0:1.0.13-6.redhat_5.1.el9ea
0:1.0.13-6.redhat_5.1.el9ea
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el9ea
0:2.8.9-1.redhat_00001.1.el9ea
redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el9ea
0:1.0.1-1.redhat_00002.1.el9ea
redhat/eap7-guava-libraries<0:30.1.0-1.1.redhat_00001.1.el9ea
0:30.1.0-1.1.redhat_00001.1.el9ea
redhat/eap7-h2database<0:1.4.197-2.redhat_00004.1.el9ea
0:1.4.197-2.redhat_00004.1.el9ea
redhat/eap7-hal-console<0:3.3.13-1.Final_redhat_00001.1.el9ea
0:3.3.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate<0:5.3.27-1.Final_redhat_00001.1.el9ea
0:5.3.27-1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-beanvalidation-api<0:2.0.2-1.redhat_00001.1.el9ea
0:2.0.2-1.redhat_00001.1.el9ea
redhat/eap7-hibernate-commons-annotations<0:5.0.5-1.1.Final_redhat_00002.1.el9ea
0:5.0.5-1.1.Final_redhat_00002.1.el9ea
redhat/eap7-hibernate-search<0:5.10.7-1.1.Final_redhat_00001.1.el9ea
0:5.10.7-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-hibernate-validator<0:6.0.23-1.Final_redhat_00001.1.el9ea
0:6.0.23-1.Final_redhat_00001.1.el9ea
redhat/eap7-hornetq<0:2.4.8-1.Final_redhat_00001.1.el9ea
0:2.4.8-1.Final_redhat_00001.1.el9ea
redhat/eap7-httpcomponents-asyncclient<0:4.1.4-1.1.redhat_00001.1.el9ea
0:4.1.4-1.1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el9ea
0:4.5.13-1.redhat_00001.1.el9ea
redhat/eap7-httpcomponents-core<0:4.4.14-1.redhat_00001.1.el9ea
0:4.4.14-1.redhat_00001.1.el9ea
redhat/eap7-infinispan<0:11.0.15-1.Final_redhat_00001.1.el9ea
0:11.0.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-ironjacamar<0:1.5.3-2.SP1_redhat_00001.1.el9ea
0:1.5.3-2.SP1_redhat_00001.1.el9ea
redhat/eap7-jackson-annotations<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-core<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-coreutils<0:1.8.0-1.redhat_00002.1.el9ea
0:1.8.0-1.redhat_00002.1.el9ea
redhat/eap7-jackson-databind<0:2.12.6.1-2.redhat_00004.1.el9ea
0:2.12.6.1-2.redhat_00004.1.el9ea
redhat/eap7-jackson-jaxrs-providers<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-base<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jackson-modules-java8<0:2.12.6-1.redhat_00001.1.el9ea
0:2.12.6-1.redhat_00001.1.el9ea
redhat/eap7-jakarta-el<0:3.0.3-3.redhat_00007.1.el9ea
0:3.0.3-3.redhat_00007.1.el9ea
redhat/eap7-jakarta-security-enterprise-api<0:1.0.2-3.redhat_00001.1.el9ea
0:1.0.2-3.redhat_00001.1.el9ea
redhat/eap7-jandex<0:2.4.2-1.Final_redhat_00001.1.el9ea
0:2.4.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jansi<0:1.18.0-1.redhat_00001.1.el9ea
0:1.18.0-1.redhat_00001.1.el9ea
redhat/eap7-jasypt<0:1.9.3-1.redhat_00002.1.el9ea
0:1.9.3-1.redhat_00002.1.el9ea
redhat/eap7-java-classmate<0:1.5.1-1.redhat_00001.1.el9ea
0:1.5.1-1.redhat_00001.1.el9ea
redhat/eap7-javaee-jpa-spec<0:2.2.3-1.redhat_00001.1.el9ea
0:2.2.3-1.redhat_00001.1.el9ea
redhat/eap7-javaee-security-soteria<0:1.0.1-3.redhat_00002.1.el9ea
0:1.0.1-3.redhat_00002.1.el9ea
redhat/eap7-javaewah<0:1.1.7-1.redhat_00001.1.el9ea
0:1.1.7-1.redhat_00001.1.el9ea
redhat/eap7-javapackages-tools<0:3.4.1-5.15.6.el9ea
0:3.4.1-5.15.6.el9ea
redhat/eap7-javassist<0:3.27.0-2.GA_redhat_00001.1.el9ea
0:3.27.0-2.GA_redhat_00001.1.el9ea
redhat/eap7-jaxbintros<0:1.0.3-1.GA_redhat_00001.1.el9ea
0:1.0.3-1.GA_redhat_00001.1.el9ea
redhat/eap7-jaxen<0:1.1.6-14.redhat_2.1.el9ea
0:1.1.6-14.redhat_2.1.el9ea
redhat/eap7-jberet<0:1.3.9-2.SP2_redhat_00001.1.el9ea
0:1.3.9-2.SP2_redhat_00001.1.el9ea
redhat/eap7-jboss-aesh<0:2.4.0-1.redhat_00001.1.el9ea
0:2.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jboss-classfilewriter<0:1.2.5-1.Final_redhat_00001.1.el9ea
0:1.2.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-common-beans<0:2.0.1-1.Final_redhat_00001.1.el9ea
0:2.0.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-dmr<0:1.5.1-1.Final_redhat_00001.1.el9ea
0:1.5.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb3-ext-api<0:2.3.0-1.Final_redhat_00001.1.el9ea
0:2.3.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-ejb-client<0:4.0.44-1.Final_redhat_00001.1.el9ea
0:4.0.44-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-genericjms<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-iiop-client<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jboss-invocation<0:1.6.3-1.Final_redhat_00001.1.el9ea
0:1.6.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logging<0:3.4.1-2.Final_redhat_00001.1.el9ea
0:3.4.1-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-logmanager<0:2.1.18-1.Final_redhat_00001.1.el9ea
0:2.1.18-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-marshalling<0:2.0.12-1.1.Final_redhat_00001.1.el9ea
0:2.0.12-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-metadata<0:13.0.0-1.Final_redhat_00001.1.el9ea
0:13.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-modules<0:1.12.0-2.Final_redhat_00001.1.el9ea
0:1.12.0-2.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-msc<0:1.4.12-1.Final_redhat_00001.1.el9ea
0:1.4.12-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-openjdk-orb<0:8.1.4-3.Final_redhat_00002.1.el9ea
0:8.1.4-3.Final_redhat_00002.1.el9ea
redhat/eap7-jboss-remoting<0:5.0.25-1.SP1_redhat_00001.1.el9ea
0:5.0.25-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jboss-remoting-jmx<0:3.0.4-1.Final_redhat_00001.1.el9ea
0:3.0.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-seam-int<0:7.0.0-6.GA_redhat_2.1.el9ea
0:7.0.0-6.GA_redhat_2.1.el9ea
redhat/eap7-jboss-security-negotiation<0:3.0.6-1.Final_redhat_00001.1.el9ea
0:3.0.6-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-security-xacml<0:2.0.8-17.Final_redhat_8.1.el9ea
0:2.0.8-17.Final_redhat_8.1.el9ea
redhat/eap7-jboss-server-migration<0:1.10.0-18.Final_redhat_00017.1.el9ea
0:1.10.0-18.Final_redhat_00017.1.el9ea
redhat/eap7-jboss-stdio<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-threads<0:2.4.0-1.Final_redhat_00001.1.el9ea
0:2.4.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-transaction-spi<0:7.6.0-2.Final_redhat_1.1.el9ea
0:7.6.0-2.Final_redhat_1.1.el9ea
redhat/eap7-jboss-vfs<0:3.2.16-1.Final_redhat_00001.1.el9ea
0:3.2.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-weld<3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
redhat/eap7-jbossws-api<0:1.1.2-1.Final_redhat_00001.1.el9ea
0:1.1.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common<0:3.3.3-1.Final_redhat_00001.1.el9ea
0:3.3.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-common-tools<0:1.3.2-1.Final_redhat_00001.1.el9ea
0:1.3.2-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-cxf<0:5.4.4-1.Final_redhat_00001.1.el9ea
0:5.4.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-jbossws-jaxws-undertow-httpspi<0:1.0.1-3.Final_redhat_1.1.el9ea
0:1.0.1-3.Final_redhat_1.1.el9ea
redhat/eap7-jbossws-spi<0:3.3.1-1.Final_redhat_00001.1.el9ea
0:3.3.1-1.Final_redhat_00001.1.el9ea
redhat/eap7-jboss-xnio-base<0:3.8.7-1.SP1_redhat_00001.1.el9ea
0:3.8.7-1.SP1_redhat_00001.1.el9ea
redhat/eap7-jcip-annotations<0:1.0.0-5.redhat_8.1.el9ea
0:1.0.0-5.redhat_8.1.el9ea
redhat/eap7-jctools<0:2.1.2-1.redhat_00003.1.el9ea
0:2.1.2-1.redhat_00003.1.el9ea
redhat/eap7-jettison<0:1.4.0-1.redhat_00001.1.el9ea
0:1.4.0-1.redhat_00001.1.el9ea
redhat/eap7-jgroups<0:4.2.15-1.Final_redhat_00001.1.el9ea
0:4.2.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-azure<0:1.3.1-1.1.Final_redhat_00001.1.el9ea
0:1.3.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-jgroups-kubernetes<0:1.0.16-1.Final_redhat_00001.1.el9ea
0:1.0.16-1.Final_redhat_00001.1.el9ea
redhat/eap7-joda-time<0:2.9.7-2.redhat_1.1.el9ea
0:2.9.7-2.redhat_1.1.el9ea
redhat/eap7-jsonb-spec<0:1.0.2-1.redhat_00001.1.el9ea
0:1.0.2-1.redhat_00001.1.el9ea
redhat/eap7-json-patch<0:1.9.0-1.redhat_00002.1.el9ea
0:1.9.0-1.redhat_00002.1.el9ea
redhat/eap7-jsoup<0:1.14.2-1.redhat_00002.1.el9ea
0:1.14.2-1.redhat_00002.1.el9ea
redhat/eap7-jul-to-slf4j-stub<0:1.0.1-7.Final_redhat_3.1.el9ea
0:1.0.1-7.Final_redhat_3.1.el9ea
redhat/eap7-log4j<0:2.17.1-2.redhat_00002.1.el9ea
0:2.17.1-2.redhat_00002.1.el9ea
redhat/eap7-log4j2-jboss-logmanager<0:1.0.0-1.Final_redhat_00001.1.el9ea
0:1.0.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-log4j-jboss-logmanager<0:1.2.2-1.Final_redhat_00002.1.el9ea
0:1.2.2-1.Final_redhat_00002.1.el9ea
redhat/eap7-lucene-solr<0:5.5.5-3.redhat_2.1.el9ea
0:5.5.5-3.redhat_2.1.el9ea
redhat/eap7-mustache-java<0:0.9.6-1.1.redhat_00001.1.el9ea
0:0.9.6-1.1.redhat_00001.1.el9ea
redhat/eap7-narayana<0:5.11.4-1.Final_redhat_00001.1.el9ea
0:5.11.4-1.Final_redhat_00001.1.el9ea
redhat/eap7-neethi<0:3.1.1-1.1.redhat_1.1.el9ea
0:3.1.1-1.1.redhat_1.1.el9ea
redhat/eap7-netty<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-tcnative<0:2.0.52-1.Final_redhat_00001.1.el9ea
0:2.0.52-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-transport-native-epoll<0:4.1.77-1.Final_redhat_00001.1.el9ea
0:4.1.77-1.Final_redhat_00001.1.el9ea
redhat/eap7-netty-xnio-transport<0:0.1.9-1.Final_redhat_00001.1.el9ea
0:0.1.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-objectweb-asm<0:9.1.0-1.redhat_00002.1.el9ea
0:9.1.0-1.redhat_00002.1.el9ea
redhat/eap7-opensaml<0:3.3.1-1.1.redhat_00002.1.el9ea
0:3.3.1-1.1.redhat_00002.1.el9ea
redhat/eap7-picketbox<0:5.0.3-10.Final_redhat_00009.1.el9ea
0:5.0.3-10.Final_redhat_00009.1.el9ea
redhat/eap7-picketbox-commons<0:1.0.0-4.final_redhat_5.1.el9ea
0:1.0.0-4.final_redhat_5.1.el9ea
redhat/eap7-picketlink-bindings<0:2.5.5-26.SP12_redhat_00014.1.el9ea
0:2.5.5-26.SP12_redhat_00014.1.el9ea
redhat/eap7-picketlink-federation<0:2.5.5-21.SP12_redhat_00011.1.el9ea
0:2.5.5-21.SP12_redhat_00011.1.el9ea
redhat/eap7-protostream<0:4.3.5-1.Final_redhat_00001.1.el9ea
0:4.3.5-1.Final_redhat_00001.1.el9ea
redhat/eap7-reactive-streams<0:1.0.3-2.redhat_00003.1.el9ea
0:1.0.3-2.redhat_00003.1.el9ea
redhat/eap7-reactivex-rxjava<0:3.0.9-1.redhat_00001.1.el9ea
0:3.0.9-1.redhat_00001.1.el9ea
redhat/eap7-reactivex-rxjava2<0:2.2.20-1.redhat_00001.1.el9ea
0:2.2.20-1.redhat_00001.1.el9ea
redhat/eap7-resteasy<0:3.15.3-1.Final_redhat_00001.1.el9ea
0:3.15.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-shibboleth-java-support<0:7.3.0-1.1.redhat_00001.1.el9ea
0:7.3.0-1.1.redhat_00001.1.el9ea
redhat/eap7-slf4j<0:1.7.22-4.1.redhat_2.1.el9ea
0:1.7.22-4.1.redhat_2.1.el9ea
redhat/eap7-slf4j-jboss-logmanager<0:1.1.0-1.Final_redhat_00001.1.el9ea
0:1.1.0-1.Final_redhat_00001.1.el9ea
redhat/eap7-snakeyaml<0:1.29.0-1.redhat_00001.2.el9ea
0:1.29.0-1.redhat_00001.2.el9ea
redhat/eap7-stax2-api<0:4.2.1-1.redhat_00001.1.el9ea
0:4.2.1-1.redhat_00001.1.el9ea
redhat/eap7-stax-ex<0:1.8.3-2.redhat_00002.1.el9ea
0:1.8.3-2.redhat_00002.1.el9ea
redhat/eap7-staxmapper<0:1.3.0-2.Final_redhat_1.1.el9ea
0:1.3.0-2.Final_redhat_1.1.el9ea
redhat/eap7-sun-istack-commons<0:3.0.10-1.1.redhat_00001.1.el9ea
0:3.0.10-1.1.redhat_00001.1.el9ea
redhat/eap7-sun-saaj<1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
redhat/eap7-sun-saaj<1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
redhat/eap7-sun-ws-metadata<2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
redhat/eap7-tomcat-taglibs-standard<0:1.2.6-2.1.RC1_redhat_1.1.el9ea
0:1.2.6-2.1.RC1_redhat_1.1.el9ea
redhat/eap7-undertow<0:2.2.18-2.SP2_redhat_00001.1.el9ea
0:2.2.18-2.SP2_redhat_00001.1.el9ea
redhat/eap7-undertow-jastow<0:2.0.9-1.Final_redhat_00001.1.el9ea
0:2.0.9-1.Final_redhat_00001.1.el9ea
redhat/eap7-undertow-js<0:1.0.2-2.Final_redhat_1.1.el9ea
0:1.0.2-2.Final_redhat_1.1.el9ea
redhat/eap7-vdx<0:1.1.6-2.redhat_1.1.el9ea
0:1.1.6-2.redhat_1.1.el9ea
redhat/eap7-velocity<0:2.3.0-1.redhat_00001.1.el9ea
0:2.3.0-1.redhat_00001.1.el9ea
redhat/eap7-weld-cdi<2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
redhat/eap7-weld-core<0:3.1.6-1.1.Final_redhat_00001.1.el9ea
0:3.1.6-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly<0:7.4.6-5.GA_redhat_00002.1.el9ea
0:7.4.6-5.GA_redhat_00002.1.el9ea
redhat/eap7-wildfly-client-config<0:1.0.1-2.1.Final_redhat_00001.1.el9ea
0:1.0.1-2.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-common<0:1.5.4-1.1.Final_redhat_00001.1.el9ea
0:1.5.4-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-discovery<0:1.2.1-1.1.Final_redhat_00001.1.el9ea
0:1.2.1-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-elytron<0:1.15.13-1.Final_redhat_00001.1.el9ea
0:1.15.13-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-http-client<0:1.1.12-1.SP1_redhat_00001.1.el9ea
0:1.1.12-1.SP1_redhat_00001.1.el9ea
redhat/eap7-wildfly-naming-client<0:1.0.14-1.1.Final_redhat_00001.1.el9ea
0:1.0.14-1.1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-openssl<0:2.2.3-1.Final_redhat_00001.1.el9ea
0:2.2.3-1.Final_redhat_00001.1.el9ea
redhat/eap7-wildfly-transaction-client<0:1.1.15-1.Final_redhat_00001.1.el9ea
0:1.1.15-1.Final_redhat_00001.1.el9ea
redhat/eap7-woodstox-core<0:6.0.3-1.1.redhat_00001.1.el9ea
0:6.0.3-1.1.redhat_00001.1.el9ea
redhat/eap7-wsdl4j<0:1.6.3-13.redhat_2.1.el9ea
0:1.6.3-13.redhat_2.1.el9ea
redhat/eap7-wss4j<0:2.2.7-1.1.redhat_00001.1.el9ea
0:2.2.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xalan-j2<0:2.7.1-36.redhat_00013.1.el9ea
0:2.7.1-36.redhat_00013.1.el9ea
redhat/eap7-xerces-j2<0:2.12.0-3.SP04_redhat_00001.1.el9ea
0:2.12.0-3.SP04_redhat_00001.1.el9ea
redhat/eap7-xml-commons-resolver<0:1.2.0-7.redhat_12.1.el9ea
0:1.2.0-7.redhat_12.1.el9ea
redhat/eap7-xml-security<0:2.1.7-1.1.redhat_00001.1.el9ea
0:2.1.7-1.1.redhat_00001.1.el9ea
redhat/eap7-xom<0:1.3.7-1.redhat_00001.1.el9ea
0:1.3.7-1.redhat_00001.1.el9ea
redhat/eap7-yasson<0:1.0.10-1.redhat_00001.1.el9ea
0:1.0.10-1.redhat_00001.1.el9ea
redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el7ea
0:2.8.9-1.redhat_00001.1.el7ea
ubuntu/libgoogle-gson-java<2.8.5-3~18.04.1~
2.8.5-3~18.04.1~
ubuntu/libgoogle-gson-java<2.8.5-3+
2.8.5-3+
ubuntu/libgoogle-gson-java<2.8.8-1ubuntu0.1
2.8.8-1ubuntu0.1
ubuntu/libgoogle-gson-java<2.4-1ubuntu0.1~
2.4-1ubuntu0.1~
IBM Cognos Analytics<=11.2.x
IBM Cognos Analytics<=11.1.x
Google gson>=2.2.3<2.8.9
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
NetApp Active Iq Unified Manager Linux
NetApp Active Iq Unified Manager Vmware Vsphere
NetApp Active Iq Unified Manager Windows
Oracle Financial Services Crime And Compliance Management Studio=8.0.8.2.0
Oracle Financial Services Crime And Compliance Management Studio=8.0.8.3.0
Oracle GraalVM=20.3.6
Oracle GraalVM=21.3.2
Oracle GraalVM=22.1.0
Oracle Retail Order Broker=18.0
Oracle Retail Order Broker=19.1
debian/libgoogle-gson-java<2.9.0-1
2.9.0-1
debian/libgoogle-gson-java<2.9.0-1
2.9.0-1
debian/libgoogle-gson-java<2.9.0-1
2.9.0-1
debian/libgoogle-gson-java
2.10-12.10.1-1
alpine/openjdk11<11.0.17_p8-r0
11.0.17_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk11<11.0.16_p8-r0
11.0.16_p8-r0
alpine/openjdk13<13.0.12_p4-r0
13.0.12_p4-r0
alpine/openjdk13<13.0.12_p4-r0
13.0.12_p4-r0
alpine/openjdk13<13.0.12_p4-r0
13.0.12_p4-r0
alpine/openjdk15<15.0.8_p4-r0
15.0.8_p4-r0
alpine/openjdk15<15.0.8_p4-r0
15.0.8_p4-r0
alpine/openjdk15<15.0.8_p4-r0
15.0.8_p4-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0
alpine/openjdk17<17.0.4_p8-r0
17.0.4_p8-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/jenkins to a version that resolves this vulnerability.

    Fixed in 2-plugins-0:4.13.1684911916-1.el8
  2. Upgrade

    Upgrade redhat/eap7-gson to a version that resolves this vulnerability.

    Fixed in 0:2.8.9-1.redhat_00001.1.el8ea
  3. Upgrade

    Upgrade redhat/eap7 to a version that resolves this vulnerability.

    Fixed in 0:1-18.el9ea
  4. Upgrade

    Upgrade redhat/eap7-activemq-artemis to a version that resolves this vulnerability.

    Fixed in 0:2.16.0-9.redhat_00042.1.el9ea
  5. Upgrade

    Upgrade redhat/eap7-activemq-artemis-native to a version that resolves this vulnerability.

    Fixed in 1:1.0.2-1.redhat_00001.1.el9ea
  6. Upgrade

    Upgrade redhat/eap7-aesh-extensions to a version that resolves this vulnerability.

    Fixed in 0:1.8.0-1.redhat_00001.1.el9ea
  7. Upgrade

    Upgrade redhat/eap7-aesh-readline to a version that resolves this vulnerability.

    Fixed in 0:2.2.0-1.redhat_00001.1.el9ea
  8. Upgrade

    Upgrade redhat/eap7-agroal to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-1.redhat_00001.1.el9ea
  9. Upgrade

    Upgrade redhat/eap7-antlr to a version that resolves this vulnerability.

    Fixed in 0:2.7.7-54.redhat_7.1.el9ea
  10. Upgrade

    Upgrade redhat/eap7-apache-commons-beanutils to a version that resolves this vulnerability.

    Fixed in 0:1.9.4-1.redhat_00002.1.el9ea
  11. Upgrade

    Upgrade redhat/eap7-apache-commons-cli to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.redhat_00001.1.el9ea
  12. Upgrade

    Upgrade redhat/eap7-apache-commons-codec to a version that resolves this vulnerability.

    Fixed in 0:1.15.0-1.redhat_00001.1.el9ea
  13. Upgrade

    Upgrade redhat/eap7-apache-commons-collections to a version that resolves this vulnerability.

    Fixed in 0:3.2.2-9.redhat_2.1.el9ea
  14. Upgrade

    Upgrade redhat/eap7-apache-commons-io to a version that resolves this vulnerability.

    Fixed in 0:2.10.0-1.redhat_00001.1.el9ea
  15. Upgrade

    Upgrade redhat/eap7-apache-commons-lang to a version that resolves this vulnerability.

    Fixed in 0:3.11.0-1.redhat_00001.1.el9ea
  16. Upgrade

    Upgrade redhat/eap7-apache-commons-lang2 to a version that resolves this vulnerability.

    Fixed in 0:2.6.0-1.redhat_7.1.el9ea
  17. Upgrade

    Upgrade redhat/eap7-apache-cxf to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.redhat_00001.1.el9ea
  18. Upgrade

    Upgrade redhat/eap7-apache-cxf-xjc-utils to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.1.redhat_00001.1.el9ea
  19. Upgrade

    Upgrade redhat/eap7-apache-mime4j to a version that resolves this vulnerability.

    Fixed in 0:0.6.0-4.1.redhat_7.1.el9ea
  20. Upgrade

    Upgrade redhat/eap7-apache-sshd to a version that resolves this vulnerability.

    Fixed in 0:2.7.0-1.redhat_00001.1.el9ea
  21. Upgrade

    Upgrade redhat/eap7-artemis-native to a version that resolves this vulnerability.

    Fixed in 1:1.0.2-3.redhat_1.el9ea
  22. Upgrade

    Upgrade redhat/eap7-artemis-wildfly-integration to a version that resolves this vulnerability.

    Fixed in 0:1.0.4-1.redhat_00001.1.el9ea
  23. Upgrade

    Upgrade redhat/eap7-atinject to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-1.redhat_00001.1.el9ea
  24. Upgrade

    Upgrade redhat/eap7-avro to a version that resolves this vulnerability.

    Fixed in 0:1.7.6-7.1.redhat_2.1.el9ea
  25. Upgrade

    Upgrade redhat/eap7-azure-storage to a version that resolves this vulnerability.

    Fixed in 0:8.6.6-1.1.redhat_00001.1.el9ea
  26. Upgrade

    Upgrade redhat/eap7-bouncycastle to a version that resolves this vulnerability.

    Fixed in 0:1.68.0-2.redhat_00005.1.el9ea
  27. Upgrade

    Upgrade redhat/eap7-byte-buddy to a version that resolves this vulnerability.

    Fixed in 0:1.11.12-2.redhat_00002.1.el9ea
  28. Upgrade

    Upgrade redhat/eap7-caffeine to a version that resolves this vulnerability.

    Fixed in 0:2.8.8-1.redhat_00001.1.el9ea
  29. Upgrade

    Upgrade redhat/eap7-cal10n to a version that resolves this vulnerability.

    Fixed in 0:0.8.1-6.redhat_1.1.el9ea
  30. Upgrade

    Upgrade redhat/eap7-codehaus-jackson to a version that resolves this vulnerability.

    Fixed in 0:1.9.13-10.redhat_00007.1.el9ea
  31. Upgrade

    Upgrade redhat/eap7-commons-logging-jboss-logging to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.Final_redhat_1.1.el9ea
  32. Upgrade

    Upgrade redhat/eap7-cryptacular to a version that resolves this vulnerability.

    Fixed in 0:1.2.4-1.redhat_00001.1.el9ea
  33. Upgrade

    Upgrade redhat/eap7-dom4j to a version that resolves this vulnerability.

    Fixed in 0:2.1.3-1.redhat_00001.1.el9ea
  34. Upgrade

    Upgrade redhat/eap7-ecj to a version that resolves this vulnerability.

    Fixed in 1:3.26.0-1.redhat_00002.1.el9ea
  35. Upgrade

    Upgrade redhat/eap7-eclipse-jgit to a version that resolves this vulnerability.

    Fixed in 0:5.13.0.202109080827-1.r_redhat_00001.1.el9ea
  36. Upgrade

    Upgrade redhat/eap7-elytron-web to a version that resolves this vulnerability.

    Fixed in 0:1.9.2-2.Final_redhat_00001.1.el9ea
  37. Upgrade

    Upgrade redhat/eap7-fge-btf to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-1.redhat_00007.1.el9ea
  38. Upgrade

    Upgrade redhat/eap7-fge-msg-simple to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.redhat_00007.1.el9ea
  39. Upgrade

    Upgrade redhat/eap7-glassfish-concurrent to a version that resolves this vulnerability.

    Fixed in 0:1.1.1-1.redhat_00001.1.el9ea
  40. Upgrade

    Upgrade redhat/eap7-glassfish-fastinfoset to a version that resolves this vulnerability.

    Fixed in 0:1.2.13-11.1.redhat_1.1.el9ea
  41. Upgrade

    Upgrade redhat/eap7-glassfish-jaf to a version that resolves this vulnerability.

    Fixed in 0:1.2.2-1.redhat_00001.1.el9ea
  42. Upgrade

    Upgrade redhat/eap7-glassfish-javamail to a version that resolves this vulnerability.

    Fixed in 0:1.6.5-1.redhat_00001.1.el9ea
  43. Upgrade

    Upgrade redhat/eap7-glassfish-jaxb to a version that resolves this vulnerability.

    Fixed in 0:2.3.3-4.1.b02_redhat_00001.1.el9ea
  44. Upgrade

    Upgrade redhat/eap7-glassfish-jsf to a version that resolves this vulnerability.

    Fixed in 0:2.3.14-4.SP05_redhat_00001.1.el9ea
  45. Upgrade

    Upgrade redhat/eap7-glassfish-json to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-2.redhat_00001.1.el9ea
  46. Upgrade

    Upgrade redhat/eap7-gnu-getopt to a version that resolves this vulnerability.

    Fixed in 0:1.0.13-6.redhat_5.1.el9ea
  47. Upgrade

    Upgrade redhat/eap7-gson to a version that resolves this vulnerability.

    Fixed in 0:2.8.9-1.redhat_00001.1.el9ea
  48. Upgrade

    Upgrade redhat/eap7-guava-failureaccess to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-1.redhat_00002.1.el9ea
  49. Upgrade

    Upgrade redhat/eap7-guava-libraries to a version that resolves this vulnerability.

    Fixed in 0:30.1.0-1.1.redhat_00001.1.el9ea
  50. Upgrade

    Upgrade redhat/eap7-h2database to a version that resolves this vulnerability.

    Fixed in 0:1.4.197-2.redhat_00004.1.el9ea
  51. Upgrade

    Upgrade redhat/eap7-hal-console to a version that resolves this vulnerability.

    Fixed in 0:3.3.13-1.Final_redhat_00001.1.el9ea
  52. Upgrade

    Upgrade redhat/eap7-hibernate to a version that resolves this vulnerability.

    Fixed in 0:5.3.27-1.Final_redhat_00001.1.el9ea
  53. Upgrade

    Upgrade redhat/eap7-hibernate-beanvalidation-api to a version that resolves this vulnerability.

    Fixed in 0:2.0.2-1.redhat_00001.1.el9ea
  54. Upgrade

    Upgrade redhat/eap7-hibernate-commons-annotations to a version that resolves this vulnerability.

    Fixed in 0:5.0.5-1.1.Final_redhat_00002.1.el9ea
  55. Upgrade

    Upgrade redhat/eap7-hibernate-search to a version that resolves this vulnerability.

    Fixed in 0:5.10.7-1.1.Final_redhat_00001.1.el9ea
  56. Upgrade

    Upgrade redhat/eap7-hibernate-validator to a version that resolves this vulnerability.

    Fixed in 0:6.0.23-1.Final_redhat_00001.1.el9ea
  57. Upgrade

    Upgrade redhat/eap7-hornetq to a version that resolves this vulnerability.

    Fixed in 0:2.4.8-1.Final_redhat_00001.1.el9ea
  58. Upgrade

    Upgrade redhat/eap7-httpcomponents-asyncclient to a version that resolves this vulnerability.

    Fixed in 0:4.1.4-1.1.redhat_00001.1.el9ea
  59. Upgrade

    Upgrade redhat/eap7-httpcomponents-client to a version that resolves this vulnerability.

    Fixed in 0:4.5.13-1.redhat_00001.1.el9ea
  60. Upgrade

    Upgrade redhat/eap7-httpcomponents-core to a version that resolves this vulnerability.

    Fixed in 0:4.4.14-1.redhat_00001.1.el9ea
  61. Upgrade

    Upgrade redhat/eap7-infinispan to a version that resolves this vulnerability.

    Fixed in 0:11.0.15-1.Final_redhat_00001.1.el9ea
  62. Upgrade

    Upgrade redhat/eap7-ironjacamar to a version that resolves this vulnerability.

    Fixed in 0:1.5.3-2.SP1_redhat_00001.1.el9ea
  63. Upgrade

    Upgrade redhat/eap7-jackson-annotations to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  64. Upgrade

    Upgrade redhat/eap7-jackson-core to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  65. Upgrade

    Upgrade redhat/eap7-jackson-coreutils to a version that resolves this vulnerability.

    Fixed in 0:1.8.0-1.redhat_00002.1.el9ea
  66. Upgrade

    Upgrade redhat/eap7-jackson-databind to a version that resolves this vulnerability.

    Fixed in 0:2.12.6.1-2.redhat_00004.1.el9ea
  67. Upgrade

    Upgrade redhat/eap7-jackson-jaxrs-providers to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  68. Upgrade

    Upgrade redhat/eap7-jackson-modules-base to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  69. Upgrade

    Upgrade redhat/eap7-jackson-modules-java8 to a version that resolves this vulnerability.

    Fixed in 0:2.12.6-1.redhat_00001.1.el9ea
  70. Upgrade

    Upgrade redhat/eap7-jakarta-el to a version that resolves this vulnerability.

    Fixed in 0:3.0.3-3.redhat_00007.1.el9ea
  71. Upgrade

    Upgrade redhat/eap7-jakarta-security-enterprise-api to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-3.redhat_00001.1.el9ea
  72. Upgrade

    Upgrade redhat/eap7-jandex to a version that resolves this vulnerability.

    Fixed in 0:2.4.2-1.Final_redhat_00001.1.el9ea
  73. Upgrade

    Upgrade redhat/eap7-jansi to a version that resolves this vulnerability.

    Fixed in 0:1.18.0-1.redhat_00001.1.el9ea
  74. Upgrade

    Upgrade redhat/eap7-jasypt to a version that resolves this vulnerability.

    Fixed in 0:1.9.3-1.redhat_00002.1.el9ea
  75. Upgrade

    Upgrade redhat/eap7-java-classmate to a version that resolves this vulnerability.

    Fixed in 0:1.5.1-1.redhat_00001.1.el9ea
  76. Upgrade

    Upgrade redhat/eap7-javaee-jpa-spec to a version that resolves this vulnerability.

    Fixed in 0:2.2.3-1.redhat_00001.1.el9ea
  77. Upgrade

    Upgrade redhat/eap7-javaee-security-soteria to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.redhat_00002.1.el9ea
  78. Upgrade

    Upgrade redhat/eap7-javaewah to a version that resolves this vulnerability.

    Fixed in 0:1.1.7-1.redhat_00001.1.el9ea
  79. Upgrade

    Upgrade redhat/eap7-javapackages-tools to a version that resolves this vulnerability.

    Fixed in 0:3.4.1-5.15.6.el9ea
  80. Upgrade

    Upgrade redhat/eap7-javassist to a version that resolves this vulnerability.

    Fixed in 0:3.27.0-2.GA_redhat_00001.1.el9ea
  81. Upgrade

    Upgrade redhat/eap7-jaxbintros to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-1.GA_redhat_00001.1.el9ea
  82. Upgrade

    Upgrade redhat/eap7-jaxen to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-14.redhat_2.1.el9ea
  83. Upgrade

    Upgrade redhat/eap7-jberet to a version that resolves this vulnerability.

    Fixed in 0:1.3.9-2.SP2_redhat_00001.1.el9ea
  84. Upgrade

    Upgrade redhat/eap7-jboss-aesh to a version that resolves this vulnerability.

    Fixed in 0:2.4.0-1.redhat_00001.1.el9ea
  85. Upgrade

    Upgrade redhat/eap7-jboss-classfilewriter to a version that resolves this vulnerability.

    Fixed in 0:1.2.5-1.Final_redhat_00001.1.el9ea
  86. Upgrade

    Upgrade redhat/eap7-jboss-common-beans to a version that resolves this vulnerability.

    Fixed in 0:2.0.1-1.Final_redhat_00001.1.el9ea
  87. Upgrade

    Upgrade redhat/eap7-jboss-dmr to a version that resolves this vulnerability.

    Fixed in 0:1.5.1-1.Final_redhat_00001.1.el9ea
  88. Upgrade

    Upgrade redhat/eap7-jboss-ejb3-ext-api to a version that resolves this vulnerability.

    Fixed in 0:2.3.0-1.Final_redhat_00001.1.el9ea
  89. Upgrade

    Upgrade redhat/eap7-jboss-ejb-client to a version that resolves this vulnerability.

    Fixed in 0:4.0.44-1.Final_redhat_00001.1.el9ea
  90. Upgrade

    Upgrade redhat/eap7-jboss-genericjms to a version that resolves this vulnerability.

    Fixed in 0:2.0.9-1.Final_redhat_00001.1.el9ea
  91. Upgrade

    Upgrade redhat/eap7-jboss-iiop-client to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.Final_redhat_1.1.el9ea
  92. Upgrade

    Upgrade redhat/eap7-jboss-invocation to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-1.Final_redhat_00001.1.el9ea
  93. Upgrade

    Upgrade redhat/eap7-jboss-logging to a version that resolves this vulnerability.

    Fixed in 0:3.4.1-2.Final_redhat_00001.1.el9ea
  94. Upgrade

    Upgrade redhat/eap7-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:2.1.18-1.Final_redhat_00001.1.el9ea
  95. Upgrade

    Upgrade redhat/eap7-jboss-marshalling to a version that resolves this vulnerability.

    Fixed in 0:2.0.12-1.1.Final_redhat_00001.1.el9ea
  96. Upgrade

    Upgrade redhat/eap7-jboss-metadata to a version that resolves this vulnerability.

    Fixed in 0:13.0.0-1.Final_redhat_00001.1.el9ea
  97. Upgrade

    Upgrade redhat/eap7-jboss-modules to a version that resolves this vulnerability.

    Fixed in 0:1.12.0-2.Final_redhat_00001.1.el9ea
  98. Upgrade

    Upgrade redhat/eap7-jboss-msc to a version that resolves this vulnerability.

    Fixed in 0:1.4.12-1.Final_redhat_00001.1.el9ea
  99. Upgrade

    Upgrade redhat/eap7-jboss-openjdk-orb to a version that resolves this vulnerability.

    Fixed in 0:8.1.4-3.Final_redhat_00002.1.el9ea
  100. Upgrade

    Upgrade redhat/eap7-jboss-remoting to a version that resolves this vulnerability.

    Fixed in 0:5.0.25-1.SP1_redhat_00001.1.el9ea
  101. Upgrade

    Upgrade redhat/eap7-jboss-remoting-jmx to a version that resolves this vulnerability.

    Fixed in 0:3.0.4-1.Final_redhat_00001.1.el9ea
  102. Upgrade

    Upgrade redhat/eap7-jboss-seam-int to a version that resolves this vulnerability.

    Fixed in 0:7.0.0-6.GA_redhat_2.1.el9ea
  103. Upgrade

    Upgrade redhat/eap7-jboss-security-negotiation to a version that resolves this vulnerability.

    Fixed in 0:3.0.6-1.Final_redhat_00001.1.el9ea
  104. Upgrade

    Upgrade redhat/eap7-jboss-security-xacml to a version that resolves this vulnerability.

    Fixed in 0:2.0.8-17.Final_redhat_8.1.el9ea
  105. Upgrade

    Upgrade redhat/eap7-jboss-server-migration to a version that resolves this vulnerability.

    Fixed in 0:1.10.0-18.Final_redhat_00017.1.el9ea
  106. Upgrade

    Upgrade redhat/eap7-jboss-stdio to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.Final_redhat_00001.1.el9ea
  107. Upgrade

    Upgrade redhat/eap7-jboss-threads to a version that resolves this vulnerability.

    Fixed in 0:2.4.0-1.Final_redhat_00001.1.el9ea
  108. Upgrade

    Upgrade redhat/eap7-jboss-transaction-spi to a version that resolves this vulnerability.

    Fixed in 0:7.6.0-2.Final_redhat_1.1.el9ea
  109. Upgrade

    Upgrade redhat/eap7-jboss-vfs to a version that resolves this vulnerability.

    Fixed in 0:3.2.16-1.Final_redhat_00001.1.el9ea
  110. Upgrade

    Upgrade redhat/eap7-jboss-weld to a version that resolves this vulnerability.

    Fixed in 3.1-api-0:3.1.0-6.SP3_redhat_00001.1.el9ea
  111. Upgrade

    Upgrade redhat/eap7-jbossws-api to a version that resolves this vulnerability.

    Fixed in 0:1.1.2-1.Final_redhat_00001.1.el9ea
  112. Upgrade

    Upgrade redhat/eap7-jbossws-common to a version that resolves this vulnerability.

    Fixed in 0:3.3.3-1.Final_redhat_00001.1.el9ea
  113. Upgrade

    Upgrade redhat/eap7-jbossws-common-tools to a version that resolves this vulnerability.

    Fixed in 0:1.3.2-1.Final_redhat_00001.1.el9ea
  114. Upgrade

    Upgrade redhat/eap7-jbossws-cxf to a version that resolves this vulnerability.

    Fixed in 0:5.4.4-1.Final_redhat_00001.1.el9ea
  115. Upgrade

    Upgrade redhat/eap7-jbossws-jaxws-undertow-httpspi to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-3.Final_redhat_1.1.el9ea
  116. Upgrade

    Upgrade redhat/eap7-jbossws-spi to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.Final_redhat_00001.1.el9ea
  117. Upgrade

    Upgrade redhat/eap7-jboss-xnio-base to a version that resolves this vulnerability.

    Fixed in 0:3.8.7-1.SP1_redhat_00001.1.el9ea
  118. Upgrade

    Upgrade redhat/eap7-jcip-annotations to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-5.redhat_8.1.el9ea
  119. Upgrade

    Upgrade redhat/eap7-jctools to a version that resolves this vulnerability.

    Fixed in 0:2.1.2-1.redhat_00003.1.el9ea
  120. Upgrade

    Upgrade redhat/eap7-jettison to a version that resolves this vulnerability.

    Fixed in 0:1.4.0-1.redhat_00001.1.el9ea
  121. Upgrade

    Upgrade redhat/eap7-jgroups to a version that resolves this vulnerability.

    Fixed in 0:4.2.15-1.Final_redhat_00001.1.el9ea
  122. Upgrade

    Upgrade redhat/eap7-jgroups-azure to a version that resolves this vulnerability.

    Fixed in 0:1.3.1-1.1.Final_redhat_00001.1.el9ea
  123. Upgrade

    Upgrade redhat/eap7-jgroups-kubernetes to a version that resolves this vulnerability.

    Fixed in 0:1.0.16-1.Final_redhat_00001.1.el9ea
  124. Upgrade

    Upgrade redhat/eap7-joda-time to a version that resolves this vulnerability.

    Fixed in 0:2.9.7-2.redhat_1.1.el9ea
  125. Upgrade

    Upgrade redhat/eap7-jsonb-spec to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-1.redhat_00001.1.el9ea
  126. Upgrade

    Upgrade redhat/eap7-json-patch to a version that resolves this vulnerability.

    Fixed in 0:1.9.0-1.redhat_00002.1.el9ea
  127. Upgrade

    Upgrade redhat/eap7-jsoup to a version that resolves this vulnerability.

    Fixed in 0:1.14.2-1.redhat_00002.1.el9ea
  128. Upgrade

    Upgrade redhat/eap7-jul-to-slf4j-stub to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-7.Final_redhat_3.1.el9ea
  129. Upgrade

    Upgrade redhat/eap7-log4j to a version that resolves this vulnerability.

    Fixed in 0:2.17.1-2.redhat_00002.1.el9ea
  130. Upgrade

    Upgrade redhat/eap7-log4j2-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-1.Final_redhat_00001.1.el9ea
  131. Upgrade

    Upgrade redhat/eap7-log4j-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.2.2-1.Final_redhat_00002.1.el9ea
  132. Upgrade

    Upgrade redhat/eap7-lucene-solr to a version that resolves this vulnerability.

    Fixed in 0:5.5.5-3.redhat_2.1.el9ea
  133. Upgrade

    Upgrade redhat/eap7-mustache-java to a version that resolves this vulnerability.

    Fixed in 0:0.9.6-1.1.redhat_00001.1.el9ea
  134. Upgrade

    Upgrade redhat/eap7-narayana to a version that resolves this vulnerability.

    Fixed in 0:5.11.4-1.Final_redhat_00001.1.el9ea
  135. Upgrade

    Upgrade redhat/eap7-neethi to a version that resolves this vulnerability.

    Fixed in 0:3.1.1-1.1.redhat_1.1.el9ea
  136. Upgrade

    Upgrade redhat/eap7-netty to a version that resolves this vulnerability.

    Fixed in 0:4.1.77-1.Final_redhat_00001.1.el9ea
  137. Upgrade

    Upgrade redhat/eap7-netty-tcnative to a version that resolves this vulnerability.

    Fixed in 0:2.0.52-1.Final_redhat_00001.1.el9ea
  138. Upgrade

    Upgrade redhat/eap7-netty-transport-native-epoll to a version that resolves this vulnerability.

    Fixed in 0:4.1.77-1.Final_redhat_00001.1.el9ea
  139. Upgrade

    Upgrade redhat/eap7-netty-xnio-transport to a version that resolves this vulnerability.

    Fixed in 0:0.1.9-1.Final_redhat_00001.1.el9ea
  140. Upgrade

    Upgrade redhat/eap7-objectweb-asm to a version that resolves this vulnerability.

    Fixed in 0:9.1.0-1.redhat_00002.1.el9ea
  141. Upgrade

    Upgrade redhat/eap7-opensaml to a version that resolves this vulnerability.

    Fixed in 0:3.3.1-1.1.redhat_00002.1.el9ea
  142. Upgrade

    Upgrade redhat/eap7-picketbox to a version that resolves this vulnerability.

    Fixed in 0:5.0.3-10.Final_redhat_00009.1.el9ea
  143. Upgrade

    Upgrade redhat/eap7-picketbox-commons to a version that resolves this vulnerability.

    Fixed in 0:1.0.0-4.final_redhat_5.1.el9ea
  144. Upgrade

    Upgrade redhat/eap7-picketlink-bindings to a version that resolves this vulnerability.

    Fixed in 0:2.5.5-26.SP12_redhat_00014.1.el9ea
  145. Upgrade

    Upgrade redhat/eap7-picketlink-federation to a version that resolves this vulnerability.

    Fixed in 0:2.5.5-21.SP12_redhat_00011.1.el9ea
  146. Upgrade

    Upgrade redhat/eap7-protostream to a version that resolves this vulnerability.

    Fixed in 0:4.3.5-1.Final_redhat_00001.1.el9ea
  147. Upgrade

    Upgrade redhat/eap7-reactive-streams to a version that resolves this vulnerability.

    Fixed in 0:1.0.3-2.redhat_00003.1.el9ea
  148. Upgrade

    Upgrade redhat/eap7-reactivex-rxjava to a version that resolves this vulnerability.

    Fixed in 0:3.0.9-1.redhat_00001.1.el9ea
  149. Upgrade

    Upgrade redhat/eap7-reactivex-rxjava2 to a version that resolves this vulnerability.

    Fixed in 0:2.2.20-1.redhat_00001.1.el9ea
  150. Upgrade

    Upgrade redhat/eap7-resteasy to a version that resolves this vulnerability.

    Fixed in 0:3.15.3-1.Final_redhat_00001.1.el9ea
  151. Upgrade

    Upgrade redhat/eap7-shibboleth-java-support to a version that resolves this vulnerability.

    Fixed in 0:7.3.0-1.1.redhat_00001.1.el9ea
  152. Upgrade

    Upgrade redhat/eap7-slf4j to a version that resolves this vulnerability.

    Fixed in 0:1.7.22-4.1.redhat_2.1.el9ea
  153. Upgrade

    Upgrade redhat/eap7-slf4j-jboss-logmanager to a version that resolves this vulnerability.

    Fixed in 0:1.1.0-1.Final_redhat_00001.1.el9ea
  154. Upgrade

    Upgrade redhat/eap7-snakeyaml to a version that resolves this vulnerability.

    Fixed in 0:1.29.0-1.redhat_00001.2.el9ea
  155. Upgrade

    Upgrade redhat/eap7-stax2-api to a version that resolves this vulnerability.

    Fixed in 0:4.2.1-1.redhat_00001.1.el9ea
  156. Upgrade

    Upgrade redhat/eap7-stax-ex to a version that resolves this vulnerability.

    Fixed in 0:1.8.3-2.redhat_00002.1.el9ea
  157. Upgrade

    Upgrade redhat/eap7-staxmapper to a version that resolves this vulnerability.

    Fixed in 0:1.3.0-2.Final_redhat_1.1.el9ea
  158. Upgrade

    Upgrade redhat/eap7-sun-istack-commons to a version that resolves this vulnerability.

    Fixed in 0:3.0.10-1.1.redhat_00001.1.el9ea
  159. Upgrade

    Upgrade redhat/eap7-sun-saaj to a version that resolves this vulnerability.

    Fixed in 1.3-impl-0:1.3.16-18.SP1_redhat_6.1.el9ea
  160. Upgrade

    Upgrade redhat/eap7-sun-saaj to a version that resolves this vulnerability.

    Fixed in 1.4-impl-0:1.4.1-1.SP1_redhat_00001.1.el9ea
  161. Upgrade

    Upgrade redhat/eap7-sun-ws-metadata to a version that resolves this vulnerability.

    Fixed in 2.0-api-0:1.0.0-7.MR1_redhat_8.1.el9ea
  162. Upgrade

    Upgrade redhat/eap7-tomcat-taglibs-standard to a version that resolves this vulnerability.

    Fixed in 0:1.2.6-2.1.RC1_redhat_1.1.el9ea
  163. Upgrade

    Upgrade redhat/eap7-undertow to a version that resolves this vulnerability.

    Fixed in 0:2.2.18-2.SP2_redhat_00001.1.el9ea
  164. Upgrade

    Upgrade redhat/eap7-undertow-jastow to a version that resolves this vulnerability.

    Fixed in 0:2.0.9-1.Final_redhat_00001.1.el9ea
  165. Upgrade

    Upgrade redhat/eap7-undertow-js to a version that resolves this vulnerability.

    Fixed in 0:1.0.2-2.Final_redhat_1.1.el9ea
  166. Upgrade

    Upgrade redhat/eap7-vdx to a version that resolves this vulnerability.

    Fixed in 0:1.1.6-2.redhat_1.1.el9ea
  167. Upgrade

    Upgrade redhat/eap7-velocity to a version that resolves this vulnerability.

    Fixed in 0:2.3.0-1.redhat_00001.1.el9ea
  168. Upgrade

    Upgrade redhat/eap7-weld-cdi to a version that resolves this vulnerability.

    Fixed in 2.0-api-0:2.0.2-2.redhat_00002.1.el9ea
  169. Upgrade

    Upgrade redhat/eap7-weld-core to a version that resolves this vulnerability.

    Fixed in 0:3.1.6-1.1.Final_redhat_00001.1.el9ea
  170. Upgrade

    Upgrade redhat/eap7-wildfly to a version that resolves this vulnerability.

    Fixed in 0:7.4.6-5.GA_redhat_00002.1.el9ea
  171. Upgrade

    Upgrade redhat/eap7-wildfly-client-config to a version that resolves this vulnerability.

    Fixed in 0:1.0.1-2.1.Final_redhat_00001.1.el9ea
  172. Upgrade

    Upgrade redhat/eap7-wildfly-common to a version that resolves this vulnerability.

    Fixed in 0:1.5.4-1.1.Final_redhat_00001.1.el9ea
  173. Upgrade

    Upgrade redhat/eap7-wildfly-discovery to a version that resolves this vulnerability.

    Fixed in 0:1.2.1-1.1.Final_redhat_00001.1.el9ea
  174. Upgrade

    Upgrade redhat/eap7-wildfly-elytron to a version that resolves this vulnerability.

    Fixed in 0:1.15.13-1.Final_redhat_00001.1.el9ea
  175. Upgrade

    Upgrade redhat/eap7-wildfly-http-client to a version that resolves this vulnerability.

    Fixed in 0:1.1.12-1.SP1_redhat_00001.1.el9ea
  176. Upgrade

    Upgrade redhat/eap7-wildfly-naming-client to a version that resolves this vulnerability.

    Fixed in 0:1.0.14-1.1.Final_redhat_00001.1.el9ea
  177. Upgrade

    Upgrade redhat/eap7-wildfly-openssl to a version that resolves this vulnerability.

    Fixed in 0:2.2.3-1.Final_redhat_00001.1.el9ea
  178. Upgrade

    Upgrade redhat/eap7-wildfly-transaction-client to a version that resolves this vulnerability.

    Fixed in 0:1.1.15-1.Final_redhat_00001.1.el9ea
  179. Upgrade

    Upgrade redhat/eap7-woodstox-core to a version that resolves this vulnerability.

    Fixed in 0:6.0.3-1.1.redhat_00001.1.el9ea
  180. Upgrade

    Upgrade redhat/eap7-wsdl4j to a version that resolves this vulnerability.

    Fixed in 0:1.6.3-13.redhat_2.1.el9ea
  181. Upgrade

    Upgrade redhat/eap7-wss4j to a version that resolves this vulnerability.

    Fixed in 0:2.2.7-1.1.redhat_00001.1.el9ea
  182. Upgrade

    Upgrade redhat/eap7-xalan-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.7.1-36.redhat_00013.1.el9ea
  183. Upgrade

    Upgrade redhat/eap7-xerces-j2 to a version that resolves this vulnerability.

    Fixed in 0:2.12.0-3.SP04_redhat_00001.1.el9ea
  184. Upgrade

    Upgrade redhat/eap7-xml-commons-resolver to a version that resolves this vulnerability.

    Fixed in 0:1.2.0-7.redhat_12.1.el9ea
  185. Upgrade

    Upgrade redhat/eap7-xml-security to a version that resolves this vulnerability.

    Fixed in 0:2.1.7-1.1.redhat_00001.1.el9ea
  186. Upgrade

    Upgrade redhat/eap7-xom to a version that resolves this vulnerability.

    Fixed in 0:1.3.7-1.redhat_00001.1.el9ea
  187. Upgrade

    Upgrade redhat/eap7-yasson to a version that resolves this vulnerability.

    Fixed in 0:1.0.10-1.redhat_00001.1.el9ea
  188. Upgrade

    Upgrade redhat/eap7-gson to a version that resolves this vulnerability.

    Fixed in 0:2.8.9-1.redhat_00001.1.el7ea
  189. Upgrade

    Upgrade ubuntu/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.8.5-3~18.04.1~
  190. Upgrade

    Upgrade ubuntu/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.8.5-3+
  191. Upgrade

    Upgrade ubuntu/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.8.8-1ubuntu0.1
  192. Upgrade

    Upgrade ubuntu/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.4-1ubuntu0.1~
  193. Upgrade

    Upgrade debian/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.10-1Fixed in 2.10.1-1
  194. Upgrade

    Upgrade alpine/openjdk11 to a version that resolves this vulnerability.

    Fixed in 11.0.17_p8-r0
  195. Upgrade

    Upgrade alpine/openjdk11 to a version that resolves this vulnerability.

    Fixed in 11.0.16_p8-r0
  196. Upgrade

    Upgrade alpine/openjdk13 to a version that resolves this vulnerability.

    Fixed in 13.0.12_p4-r0
  197. Upgrade

    Upgrade alpine/openjdk15 to a version that resolves this vulnerability.

    Fixed in 15.0.8_p4-r0
  198. Upgrade

    Upgrade alpine/openjdk17 to a version that resolves this vulnerability.

    Fixed in 17.0.4_p8-r0
  199. Upgrade

    Upgrade debian/libgoogle-gson-java to a version that resolves this vulnerability.

    Fixed in 2.9.0-1

Event History

May 1, 2022
CVE Published
12:00 AM
CVE Published
via MITRE·03:30 PM
Data Sourced
via MITRE·03:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·04:15 PM
DescriptionSeverityAffected Software
May 2, 2022
Data Sourced
via Red Hat·07:18 AM
DescriptionSeverityAffected Software
May 6, 2022
Data Sourced
01:36 PM
SeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2022-25647?

CVE-2022-25647 has been classified as a medium severity vulnerability due to its potential to cause denial of service attacks.

2

How do I fix CVE-2022-25647?

To fix CVE-2022-25647, update the affected packages to the specified versions or apply the recommended patches from Red Hat.

3

What are the affected applications for CVE-2022-25647?

CVE-2022-25647 affects Google Gson, particularly in versions prior to 2.8.9 and several Red Hat products using Gson.

4

Can CVE-2022-25647 lead to data breaches?

CVE-2022-25647 primarily leads to denial of service but does not directly facilitate data breach vulnerabilities.

5

Is there a workaround for CVE-2022-25647?

If immediate patching is not possible for CVE-2022-25647, review and filter untrusted data before deserialization as a potential workaround.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203