{"schemaVersion":3,"id":"RHSA-2016:1434","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform update","dates":{"published":"2024-09-29T17:06:10.000Z","modified":"2026-08-05T10:04:01.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"apache-cxf","name":"apache-cxf","label":"apache-cxf","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/apache-cxf","purlType":"rpm","versions":[{"text":"< 0:2.7.18-2.SP1_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.18-2.SP1_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"glassfish-jsf-eap6","name":"glassfish-jsf-eap6","label":"glassfish-jsf-eap6","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/glassfish-jsf-eap6","purlType":"rpm","versions":[{"text":"< 0:2.1.28-11.SP10_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.1.28-11.SP10_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"hibernate4-validator","name":"hibernate4-validator","label":"hibernate4-validator","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hibernate4-validator","purlType":"rpm","versions":[{"text":"< 0:4.3.3-1.Final_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:4.3.3-1.Final_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"hornetq","name":"hornetq","label":"hornetq","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/hornetq","purlType":"rpm","versions":[{"text":"< 0:2.3.25-13.SP11_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.3.25-13.SP11_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-appclient","name":"jboss-as-appclient","label":"jboss-as-appclient","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-appclient","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-cli","name":"jboss-as-cli","label":"jboss-as-cli","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-cli","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-client-all","name":"jboss-as-client-all","label":"jboss-as-client-all","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-client-all","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-clustering","name":"jboss-as-clustering","label":"jboss-as-clustering","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-clustering","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-cmp","name":"jboss-as-cmp","label":"jboss-as-cmp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-cmp","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-configadmin","name":"jboss-as-configadmin","label":"jboss-as-configadmin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-configadmin","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-connector","name":"jboss-as-connector","label":"jboss-as-connector","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-connector","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-controller","name":"jboss-as-controller","label":"jboss-as-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-controller-client","name":"jboss-as-controller-client","label":"jboss-as-controller-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-controller-client","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-core-security","name":"jboss-as-core-security","label":"jboss-as-core-security","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-core-security","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-deployment-repository","name":"jboss-as-deployment-repository","label":"jboss-as-deployment-repository","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-deployment-repository","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-deployment-scanner","name":"jboss-as-deployment-scanner","label":"jboss-as-deployment-scanner","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-deployment-scanner","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-domain-http","name":"jboss-as-domain-http","label":"jboss-as-domain-http","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-domain-http","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-domain-management","name":"jboss-as-domain-management","label":"jboss-as-domain-management","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-domain-management","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ee","name":"jboss-as-ee","label":"jboss-as-ee","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ee","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ee-deployment","name":"jboss-as-ee-deployment","label":"jboss-as-ee-deployment","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ee-deployment","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ejb3","name":"jboss-as-ejb3","label":"jboss-as-ejb3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ejb3","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-embedded","name":"jboss-as-embedded","label":"jboss-as-embedded","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-embedded","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-host-controller","name":"jboss-as-host-controller","label":"jboss-as-host-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-host-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jacorb","name":"jboss-as-jacorb","label":"jboss-as-jacorb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jacorb","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jaxr","name":"jboss-as-jaxr","label":"jboss-as-jaxr","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jaxr","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jaxrs","name":"jboss-as-jaxrs","label":"jboss-as-jaxrs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jaxrs","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jdr","name":"jboss-as-jdr","label":"jboss-as-jdr","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jdr","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jmx","name":"jboss-as-jmx","label":"jboss-as-jmx","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jmx","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jpa","name":"jboss-as-jpa","label":"jboss-as-jpa","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jpa","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jsf","name":"jboss-as-jsf","label":"jboss-as-jsf","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jsf","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jsr77","name":"jboss-as-jsr77","label":"jboss-as-jsr77","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jsr77","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-logging","name":"jboss-as-logging","label":"jboss-as-logging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-logging","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-mail","name":"jboss-as-mail","label":"jboss-as-mail","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-mail","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-management-client-content","name":"jboss-as-management-client-content","label":"jboss-as-management-client-content","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-management-client-content","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-messaging","name":"jboss-as-messaging","label":"jboss-as-messaging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-messaging","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-modcluster","name":"jboss-as-modcluster","label":"jboss-as-modcluster","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-modcluster","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-naming","name":"jboss-as-naming","label":"jboss-as-naming","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-naming","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-network","name":"jboss-as-network","label":"jboss-as-network","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-network","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi","name":"jboss-as-osgi","label":"jboss-as-osgi","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi-configadmin","name":"jboss-as-osgi-configadmin","label":"jboss-as-osgi-configadmin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi-configadmin","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi-service","name":"jboss-as-osgi-service","label":"jboss-as-osgi-service","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi-service","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-picketlink","name":"jboss-as-picketlink","label":"jboss-as-picketlink","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-picketlink","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-platform-mbean","name":"jboss-as-platform-mbean","label":"jboss-as-platform-mbean","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-platform-mbean","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-pojo","name":"jboss-as-pojo","label":"jboss-as-pojo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-pojo","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-process-controller","name":"jboss-as-process-controller","label":"jboss-as-process-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-process-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-protocol","name":"jboss-as-protocol","label":"jboss-as-protocol","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-protocol","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-remoting","name":"jboss-as-remoting","label":"jboss-as-remoting","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-remoting","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-sar","name":"jboss-as-sar","label":"jboss-as-sar","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-sar","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-security","name":"jboss-as-security","label":"jboss-as-security","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-security","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-server","name":"jboss-as-server","label":"jboss-as-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-server","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-system-jmx","name":"jboss-as-system-jmx","label":"jboss-as-system-jmx","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-system-jmx","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-threads","name":"jboss-as-threads","label":"jboss-as-threads","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-threads","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-transactions","name":"jboss-as-transactions","label":"jboss-as-transactions","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-transactions","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-version","name":"jboss-as-version","label":"jboss-as-version","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-version","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-web","name":"jboss-as-web","label":"jboss-as-web","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-web","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-webservices","name":"jboss-as-webservices","label":"jboss-as-webservices","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-webservices","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-weld","name":"jboss-as-weld","label":"jboss-as-weld","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-weld","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-xts","name":"jboss-as-xts","label":"jboss-as-xts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-xts","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-jsf-api_2.1_spec","name":"jboss-jsf-api_2.1_spec","label":"jboss-jsf-api_2.1_spec","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-jsf-api_2.1_spec","purlType":"rpm","versions":[{"text":"< 0:2.1.28-6.SP2_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.1.28-6.SP2_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-msc","name":"jboss-msc","label":"jboss-msc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-msc","purlType":"rpm","versions":[{"text":"< 0:1.1.6-1.Final_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:1.1.6-1.Final_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-appclient","name":"jbossas-appclient","label":"jbossas-appclient","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-appclient","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-bundles","name":"jbossas-bundles","label":"jbossas-bundles","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-bundles","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-core","name":"jbossas-core","label":"jbossas-core","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-core","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-domain","name":"jbossas-domain","label":"jbossas-domain","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-domain","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-javadocs","name":"jbossas-javadocs","label":"jbossas-javadocs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-javadocs","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-modules-eap","name":"jbossas-modules-eap","label":"jbossas-modules-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-modules-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-product-eap","name":"jbossas-product-eap","label":"jbossas-product-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-product-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-standalone","name":"jbossas-standalone","label":"jbossas-standalone","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-standalone","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-welcome-content-eap","name":"jbossas-welcome-content-eap","label":"jbossas-welcome-content-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-welcome-content-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.9-2.Final_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossts","name":"jbossts","label":"jbossts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossts","purlType":"rpm","versions":[{"text":"< 1:4.17.34-1.Final_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.17.34-1.Final_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossweb","name":"jbossweb","label":"jbossweb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossweb","purlType":"rpm","versions":[{"text":"< 0:7.5.17-1.Final_redhat_1.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.17-1.Final_redhat_1.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"picketlink-bindings","name":"picketlink-bindings","label":"picketlink-bindings","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/picketlink-bindings","purlType":"rpm","versions":[{"text":"< 0:2.5.4-11.SP9_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.5.4-11.SP9_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"picketlink-federation","name":"picketlink-federation","label":"picketlink-federation","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/picketlink-federation","purlType":"rpm","versions":[{"text":"< 0:2.5.4-11.SP9_redhat_2.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.5.4-11.SP9_redhat_2.1.ep6.el7","eol":null,"hubHref":null},{"vendor":"redhat","product":"xalan-j2-eap6","name":"xalan-j2-eap6","label":"xalan-j2-eap6","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/xalan-j2-eap6","purlType":"rpm","versions":[{"text":"< 0:2.7.1-11.redhat_11.1.ep6.el7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.7.1-11.redhat_11.1.ep6.el7","eol":null,"hubHref":null}],"affectedCount":74,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2016:1434","label":"access.redhat.com/errata/RHSA-2016:1434","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=6.4","label":"access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=6.4","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/articles/2360521","label":"access.redhat.com/articles/2360521","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265698","label":"bugzilla.redhat.com/show_bug.cgi?id=1265698","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1313589","label":"bugzilla.redhat.com/show_bug.cgi?id=1313589","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343604","label":"bugzilla.redhat.com/show_bug.cgi?id=1343604","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343607","label":"bugzilla.redhat.com/show_bug.cgi?id=1343607","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343612","label":"bugzilla.redhat.com/show_bug.cgi?id=1343612","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1343622","label":"bugzilla.redhat.com/show_bug.cgi?id=1343622","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1434.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1434.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5174","label":"access.redhat.com/security/cve/CVE-2015-5174","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5174","label":"www.cve.org/CVERecord?id=CVE-2015-5174","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5174","label":"nvd.nist.gov/vuln/detail/CVE-2015-5174","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://seclists.org/bugtraq/2016/Feb/149","label":"seclists.org/bugtraq/2016/Feb/149","hostname":"seclists.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2141","label":"access.redhat.com/security/cve/CVE-2016-2141","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2141","label":"www.cve.org/CVERecord?id=CVE-2016-2141","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2141","label":"nvd.nist.gov/vuln/detail/CVE-2016-2141","hostname":"nvd.nist.gov","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2015-5174","CVE-2016-2141"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-29T17:06:10.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-05T10:04:01.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:36:31.545Z","stale":false,"partial":false}}