{"schemaVersion":3,"id":"RHSA-2010:0938","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update","dates":{"published":"2024-09-15T18:39:31.000Z","modified":"2025-11-22T10:28:42.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"glassfish-jaxb","name":"glassfish-jaxb","label":"glassfish-jaxb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glassfish-jaxb","purlType":"rpm","versions":[{"text":"< 0:2.1.4-1.17.patch04.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.1.4-1.17.patch04.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"glassfish-jaxws","name":"glassfish-jaxws","label":"glassfish-jaxws","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glassfish-jaxws","purlType":"rpm","versions":[{"text":"< 0:2.1.1-1jpp.ep1.13.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.1.1-1jpp.ep1.13.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3","name":"hibernate3","label":"hibernate3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations","name":"hibernate3-annotations","label":"hibernate3-annotations","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations","purlType":"rpm","versions":[{"text":"< 0:3.3.1-2.0.GA_CP04.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.3.1-2.0.GA_CP04.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-annotations-javadoc","name":"hibernate3-annotations-javadoc","label":"hibernate3-annotations-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-annotations-javadoc","purlType":"rpm","versions":[{"text":"< 0:3.3.1-2.0.GA_CP04.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.3.1-2.0.GA_CP04.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate3-javadoc","name":"hibernate3-javadoc","label":"hibernate3-javadoc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate3-javadoc","purlType":"rpm","versions":[{"text":"< 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:3.2.4-1.SP1_CP11.0jpp.ep2.0.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"javassist","name":"javassist","label":"javassist","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/javassist","purlType":"rpm","versions":[{"text":"< 0:3.9.0-2.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:3.9.0-2.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-common","name":"jboss-common","label":"jboss-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-common","purlType":"rpm","versions":[{"text":"< 0:1.2.2-1.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.2-1.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-messaging","name":"jboss-messaging","label":"jboss-messaging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-messaging","purlType":"rpm","versions":[{"text":"< 0:1.4.0-4.SP3_CP11.1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.4.0-4.SP3_CP11.1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-remoting","name":"jboss-remoting","label":"jboss-remoting","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-remoting","purlType":"rpm","versions":[{"text":"< 0:2.2.3-4.SP3.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.2.3-4.SP3.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam","name":"jboss-seam","label":"jboss-seam","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam","purlType":"rpm","versions":[{"text":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam-docs","name":"jboss-seam-docs","label":"jboss-seam-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam-docs","purlType":"rpm","versions":[{"text":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.22.el5.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam2","name":"jboss-seam2","label":"jboss-seam2","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam2","purlType":"rpm","versions":[{"text":"< 0:2.0.2.FP-1.ep1.26.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.2.FP-1.ep1.26.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-seam2-docs","name":"jboss-seam2-docs","label":"jboss-seam2-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-seam2-docs","purlType":"rpm","versions":[{"text":"< 0:2.0.2.FP-1.ep1.26.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.2.FP-1.ep1.26.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas","name":"jbossas","label":"jbossas","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas","purlType":"rpm","versions":[{"text":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-4.3.0.GA_CP09-bin","name":"jbossas-4.3.0.GA_CP09-bin","label":"jbossas-4.3.0.GA_CP09-bin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-4.3.0.GA_CP09-bin","purlType":"rpm","versions":[{"text":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-client","name":"jbossas-client","label":"jbossas-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-client","purlType":"rpm","versions":[{"text":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-8.GA_CP09.2.1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossts","name":"jbossts","label":"jbossts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossts","purlType":"rpm","versions":[{"text":"< 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.2.3-2.SP5_CP10.1jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossweb","name":"jbossweb","label":"jbossweb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossweb","purlType":"rpm","versions":[{"text":"< 0:2.0.0-7.CP15.0jpp.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.0-7.CP15.0jpp.ep1.1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossws","name":"jbossws","label":"jbossws","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossws","purlType":"rpm","versions":[{"text":"< 0:2.0.1-6.SP2_CP09.2.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.0.1-6.SP2_CP09.2.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossws-common","name":"jbossws-common","label":"jbossws-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossws-common","purlType":"rpm","versions":[{"text":"< 0:1.0.0-3.GA_CP06.1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.0.0-3.GA_CP06.1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"jgroups","name":"jgroups","label":"jgroups","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jgroups","purlType":"rpm","versions":[{"text":"< 1:2.4.9-1.ep1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:2.4.9-1.ep1.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"quartz","name":"quartz","label":"quartz","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/quartz","purlType":"rpm","versions":[{"text":"< 0:1.5.2-1jpp.patch01.ep1.4.2.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.5.2-1jpp.patch01.ep1.4.2.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-eap-docs","name":"rh-eap-docs","label":"rh-eap-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-eap-docs","purlType":"rpm","versions":[{"text":"< 0:4.3.0-8.GA_CP09.ep1.3.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-8.GA_CP09.ep1.3.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"rh-eap-docs-examples","name":"rh-eap-docs-examples","label":"rh-eap-docs-examples","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/rh-eap-docs-examples","purlType":"rpm","versions":[{"text":"< 0:4.3.0-8.GA_CP09.ep1.3.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.0-8.GA_CP09.ep1.3.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"xalan-j2","name":"xalan-j2","label":"xalan-j2","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/xalan-j2","purlType":"rpm","versions":[{"text":"< 0:2.7.1-4.ep1.1.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.1-4.ep1.1.el5","eol":null,"hubHref":null}],"affectedCount":26,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2010:0938","label":"access.redhat.com/errata/RHSA-2010:0938","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"http://docs.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3/html-single/Release_Notes_CP09/index.html","label":"docs.redhat.com/docs/…","hostname":"docs.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=604617","label":"bugzilla.redhat.com/show_bug.cgi?id=604617","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=633859","label":"bugzilla.redhat.com/show_bug.cgi?id=633859","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=638236","label":"bugzilla.redhat.com/show_bug.cgi?id=638236","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=641389","label":"bugzilla.redhat.com/show_bug.cgi?id=641389","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0938.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0938.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3708","label":"access.redhat.com/security/cve/CVE-2010-3708","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3708","label":"www.cve.org/CVERecord?id=CVE-2010-3708","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3708","label":"nvd.nist.gov/vuln/detail/CVE-2010-3708","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3862","label":"access.redhat.com/security/cve/CVE-2010-3862","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3862","label":"www.cve.org/CVERecord?id=CVE-2010-3862","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3862","label":"nvd.nist.gov/vuln/detail/CVE-2010-3862","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3878","label":"access.redhat.com/security/cve/CVE-2010-3878","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3878","label":"www.cve.org/CVERecord?id=CVE-2010-3878","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3878","label":"nvd.nist.gov/vuln/detail/CVE-2010-3878","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2010-3708","CVE-2010-3862","CVE-2010-3878"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-15T18:39:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-22T10:28:42.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T16:06:33.710Z","stale":false,"partial":false}}