RHSA-2019:1419: eap7-apache-commons-codec Red Hat

CVSS: 6.4v3.0MediumPublished

Published 22-09-2024Last modified 29-06-2026

Open JSON

Vulnerability summary

RHSA-2019:1419 is a medium (CVSS 6.4) vulnerability in eap7-apache-commons-codec Red Hat.

Overall risk

26/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.4/10

010

Medium · v3.0 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0

CVE-2019-3872 CVE-2019-3873 CVE-2019-3888

Timeline

22-09-2024
PublishedVulnerability first disclosed.
29-06-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.2 on RHEL 6 security update

CVSS metrics

1 score · 1 source · 1 version

v3.06.4

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat107 products

eap7-apache-commons-codec< 0:1.11.0-2.redhat_00001.1.el6eap
eap7-apache-cxf< 0:3.2.7-2.redhat_00002.1.el6eap
eap7-apache-cxf-rt< 0:3.2.7-2.redhat_00002.1.el6eap
eap7-apache-cxf-services< 0:3.2.7-2.redhat_00002.1.el6eap
eap7-apache-cxf-tools< 0:3.2.7-2.redhat_00002.1.el6eap

eap7-hal-console< 0:3.0.11-1.Final_redhat_00001.1.el6eap
eap7-hibernate< 0:5.3.10-1.Final_redhat_00001.1.el6eap
eap7-hibernate-core< 0:5.3.10-1.Final_redhat_00001.1.el6eap
eap7-hibernate-entitymanager< 0:5.3.10-1.Final_redhat_00001.1.el6eap
eap7-hibernate-envers< 0:5.3.10-1.Final_redhat_00001.1.el6eap
eap7-hibernate-java8< 0:5.3.10-1.Final_redhat_00001.1.el6eap
eap7-hornetq< 0:2.4.7-7.Final_redhat_2.1.el6eap
eap7-hornetq-commons< 0:2.4.7-7.Final_redhat_2.1.el6eap
eap7-hornetq-core-client< 0:2.4.7-7.Final_redhat_2.1.el6eap
eap7-hornetq-jms-client< 0:2.4.7-7.Final_redhat_2.1.el6eap
eap7-ironjacamar< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-api< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-impl< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-common-spi< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-core-api< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-core-impl< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-deployers-common< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-jdbc< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-ironjacamar-validator< 0:1.4.16-2.Final_redhat_00001.1.el6eap
eap7-javassist< 0:3.23.2-2.GA_redhat_00001.1.el6eap
eap7-jboss-ejb-client< 0:4.0.18-1.Final_redhat_00001.1.el6eap
eap7-jboss-marshalling< 0:2.0.7-2.Final_redhat_00001.1.el6eap
eap7-jboss-marshalling-river< 0:2.0.7-2.Final_redhat_00001.1.el6eap
eap7-jboss-modules< 0:1.8.8-1.Final_redhat_00001.1.el6eap
eap7-jboss-openjdk-orb< 0:8.1.3-1.Final_redhat_00001.1.el6eap
eap7-jboss-remoting< 0:5.0.9-1.Final_redhat_00001.1.el6eap
eap7-jboss-server-migration< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-cli< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-core< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap6.4< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap6.4-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap7.0< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap7.0-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap7.1< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap7.1-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly10.0< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly10.0-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly10.1< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly10.1-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly11.0< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly11.0-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly12.0< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly12.0-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly13.0-server< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly14.0-server< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly8.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly8.2-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly9.0< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-server-migration-wildfly9.0-to-eap7.2< 0:1.3.1-2.Final_redhat_00002.1.el6eap
eap7-jboss-xnio-base< 0:3.6.6-1.Final_redhat_00001.1.el6eap
eap7-jgroups< 0:4.0.19-1.Final_redhat_00001.1.el6eap
eap7-picketlink-api< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-bindings< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-common< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-config< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-federation< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-idm-api< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-idm-impl< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-idm-simple-schema< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-impl< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-picketlink-wildfly8< 0:2.5.5-17.SP12_redhat_00005.1.el6eap
eap7-resteasy< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-atom-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-cdi< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-client< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-client-microprofile< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-crypto< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jackson-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jackson2-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jaxb-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jaxrs< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jettison-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jose-jwt< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-jsapi< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-json-binding-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-json-p-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-multipart-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-rxjava2< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-spring< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-validator-provider-11< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-resteasy-yaml-provider< 0:3.6.1-5.SP5_redhat_00001.1.el6eap
eap7-undertow< 0:2.0.20-1.Final_redhat_00001.1.el6eap
eap7-weld-core< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-core-impl< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-core-jsf< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-ejb< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-jta< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-probe-core< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-weld-web< 0:3.0.6-1.Final_redhat_00001.1.el6eap
eap7-wildfly< 0:7.2.2-2.GA_redhat_00001.1.el6eap
eap7-wildfly-common< 0:1.5.1-1.Final_redhat_00001.1.el6eap
eap7-wildfly-discovery< 0:1.1.2-1.Final_redhat_00001.1.el6eap
eap7-wildfly-discovery-client< 0:1.1.2-1.Final_redhat_00001.1.el6eap
eap7-wildfly-http-client< 0:1.0.15-1.Final_redhat_00001.1.el6eap
eap7-wildfly-http-client-common< 0:1.0.15-1.Final_redhat_00001.1.el6eap
eap7-wildfly-http-ejb-client< 0:1.0.15-1.Final_redhat_00001.1.el6eap
eap7-wildfly-http-naming-client< 0:1.0.15-1.Final_redhat_00001.1.el6eap
eap7-wildfly-http-transaction-client< 0:1.0.15-1.Final_redhat_00001.1.el6eap
eap7-wildfly-javadocs< 0:7.2.2-2.GA_redhat_00001.1.el6eap
eap7-wildfly-modules< 0:7.2.2-2.GA_redhat_00001.1.el6eap
eap7-wildfly-naming-client< 0:1.0.10-1.Final_redhat_00001.1.el6eap

Show all 107

1 vendor · 107 products

References

39 links

Show all 39 references

issues.redhat.com/browse/JBEAP-16362ARTICLE
issues.redhat.com/browse/JBEAP-16370ARTICLE
issues.redhat.com/browse/JBEAP-16453ARTICLE
issues.redhat.com/browse/JBEAP-16457ARTICLE
issues.redhat.com/browse/JBEAP-16470ARTICLE
issues.redhat.com/browse/JBEAP-16471ARTICLE
issues.redhat.com/browse/JBEAP-16473ARTICLE
issues.redhat.com/browse/JBEAP-16580ARTICLE
issues.redhat.com/browse/JBEAP-16622ARTICLE
issues.redhat.com/browse/JBEAP-16632ARTICLE
issues.redhat.com/browse/JBEAP-16633ARTICLE
issues.redhat.com/browse/JBEAP-16670ARTICLE
issues.redhat.com/browse/JBEAP-16709ARTICLE
issues.redhat.com/browse/JBEAP-16717ARTICLE
issues.redhat.com/browse/JBEAP-16720ARTICLE
issues.redhat.com/browse/JBEAP-16781ARTICLE
issues.redhat.com/browse/JBEAP-16860ARTICLE
issues.redhat.com/browse/JBEAP-16881ARTICLE
issues.redhat.com/browse/JBEAP-16882ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1419.jsonAdvisory
access.redhat.com/security/cve/CVE-2019-3872REPORT
www.cve.org/CVERecord?id=CVE-2019-3872Advisory
nvd.nist.gov/vuln/detail/CVE-2019-3872Advisory
access.redhat.com/security/cve/CVE-2019-3873REPORT
www.cve.org/CVERecord?id=CVE-2019-3873Advisory
nvd.nist.gov/vuln/detail/CVE-2019-3873Advisory
access.redhat.com/security/cve/CVE-2019-3888REPORT
www.cve.org/CVERecord?id=CVE-2019-3888Advisory
nvd.nist.gov/vuln/detail/CVE-2019-3888Advisory