Google Security Advisories · January 2013 — Google Security Advisories
37 advisories 37 CVEs 6 EXPLOITED

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2013-01. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 6 are already weaponised in the wild.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

RHSA-2013:0197

GoogleExploitedVulnCheck KEV listedNONE2013-01-24

Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_web_platform:5::el4 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_web_platform:5::el4 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_web_platform:5::el4 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_web_platform:5::el4 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_web_platform:5::el4 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_web_platform:5::el4 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 hibernate3-search-javadoc —
jacorb-jboss affected Red Hat:jboss_enterprise_web_platform:5::el4 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_web_platform:5::el4 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-aop2 —
jbossas-web affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossas-web —
jbossas-web-client affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossas-web-client —
jbossas-web-tp-licenses affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossas-web-tp-licenses —
jbossas-web-ws-native affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossas-web-ws-native —
jbossas-ws-cxf-ewp affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossas-ws-cxf-ewp —
jboss-bootstrap affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-logmanager —
jboss-naming affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_web_platform:5::el4 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_web_platform:5::el4 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_web_platform:5::el4 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_web_platform:5::el4 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_web_platform:5::el4 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_web_platform:5::el4 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_web_platform:5::el4 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_web_platform:5::el4 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-native —
mod_cluster-native-debuginfo affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-native-debuginfo —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_web_platform:5::el4 mod_cluster-tomcat6 —
picketlink-federation affected Red Hat:jboss_enterprise_web_platform:5::el4 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_web_platform:5::el4 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_web_platform:5::el4 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_web_platform:5::el4 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_web_platform:5::el4 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_web_platform:5::el4 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_web_platform:5::el4 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el4 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_web_platform:5::el4 resteasy-manual —
rh-ewp-docs affected Red Hat:jboss_enterprise_web_platform:5::el4 rh-ewp-docs —
rh-ewp-docs-examples affected Red Hat:jboss_enterprise_web_platform:5::el4 rh-ewp-docs-examples —
rhq affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq —
rhq-common-parent affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-comm-api —
rhq-core-domain affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-plugin-container —
rhq-core-util affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-core-util —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-platform-plugin —
rhq-plugins-parent affected Red Hat:jboss_enterprise_web_platform:5::el4 rhq-plugins-parent —
spring2 affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_web_platform:5::el4 spring2-core —
wss4j affected Red Hat:jboss_enterprise_web_platform:5::el4 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_web_platform:5::el4 xerces-j2 —
xerces-j2-scripts affected Red Hat:jboss_enterprise_web_platform:5::el4 xerces-j2-scripts —
xml-commons affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_web_platform:5::el4 xml-security —
Upstream advisory

RHSA-2013:0196

GoogleExploitedVulnCheck KEV listedNONE2013-01-24

Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_web_platform:5::el5 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_web_platform:5::el5 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_web_platform:5::el5 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_web_platform:5::el5 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_web_platform:5::el5 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_web_platform:5::el5 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 hibernate3-search-javadoc —
jacorb-jboss affected Red Hat:jboss_enterprise_web_platform:5::el5 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_web_platform:5::el5 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-aop2 —
jbossas-web affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossas-web —
jbossas-web-client affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossas-web-client —
jbossas-web-tp-licenses affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossas-web-tp-licenses —
jbossas-web-ws-native affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossas-web-ws-native —
jbossas-ws-cxf-ewp affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossas-ws-cxf-ewp —
jboss-bootstrap affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-logmanager —
jboss-naming affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_web_platform:5::el5 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_web_platform:5::el5 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_web_platform:5::el5 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_web_platform:5::el5 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_web_platform:5::el5 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_web_platform:5::el5 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_web_platform:5::el5 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_web_platform:5::el5 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster-native —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_web_platform:5::el5 mod_cluster-tomcat6 —
picketlink-federation affected Red Hat:jboss_enterprise_web_platform:5::el5 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_web_platform:5::el5 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_web_platform:5::el5 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_web_platform:5::el5 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_web_platform:5::el5 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_web_platform:5::el5 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_web_platform:5::el5 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el5 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_web_platform:5::el5 resteasy-manual —
rh-ewp-docs affected Red Hat:jboss_enterprise_web_platform:5::el5 rh-ewp-docs —
rh-ewp-docs-examples affected Red Hat:jboss_enterprise_web_platform:5::el5 rh-ewp-docs-examples —
rhq affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq —
rhq-common-parent affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-comm-api —
rhq-core-domain affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-plugin-container —
rhq-core-util affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-core-util —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-platform-plugin —
rhq-plugins-parent affected Red Hat:jboss_enterprise_web_platform:5::el5 rhq-plugins-parent —
spring2 affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_web_platform:5::el5 spring2-core —
wss4j affected Red Hat:jboss_enterprise_web_platform:5::el5 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_web_platform:5::el5 xerces-j2 —
xerces-j2-scripts affected Red Hat:jboss_enterprise_web_platform:5::el5 xerces-j2-scripts —
xml-commons affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_web_platform:5::el5 xml-security —
Upstream advisory

RHSA-2013:0195

GoogleExploitedVulnCheck KEV listedNONE2013-01-24

Red Hat Security Advisory: JBoss Enterprise Web Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_web_platform:5::el6 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_web_platform:5::el6 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_web_platform:5::el6 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_web_platform:5::el6 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_web_platform:5::el6 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_web_platform:5::el6 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 hibernate3-search-javadoc —
hsqldb affected Red Hat:jboss_enterprise_web_platform:5::el6 hsqldb —
jacorb-jboss affected Red Hat:jboss_enterprise_web_platform:5::el6 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_web_platform:5::el6 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-aop2 —
jbossas-web affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossas-web —
jbossas-web-client affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossas-web-client —
jbossas-web-tp-licenses affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossas-web-tp-licenses —
jbossas-web-ws-native affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossas-web-ws-native —
jbossas-ws-cxf-ewp affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossas-ws-cxf-ewp —
jboss-bootstrap affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-logmanager —
jboss-naming affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_web_platform:5::el6 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_web_platform:5::el6 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_web_platform:5::el6 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_web_platform:5::el6 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_web_platform:5::el6 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_web_platform:5::el6 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_web_platform:5::el6 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_web_platform:5::el6 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster-native —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_web_platform:5::el6 mod_cluster-tomcat6 —
picketlink-federation affected Red Hat:jboss_enterprise_web_platform:5::el6 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_web_platform:5::el6 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_web_platform:5::el6 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_web_platform:5::el6 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_web_platform:5::el6 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_web_platform:5::el6 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_web_platform:5::el6 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_web_platform:5::el6 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_web_platform:5::el6 resteasy-manual —
rh-ewp-docs affected Red Hat:jboss_enterprise_web_platform:5::el6 rh-ewp-docs —
rh-ewp-docs-examples affected Red Hat:jboss_enterprise_web_platform:5::el6 rh-ewp-docs-examples —
rhq affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq —
rhq-ant-bundle-common affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-ant-bundle-common —
rhq-common-parent affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-comm-api —
rhq-core-dbutils affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-dbutils —
rhq-core-domain affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-plugin-container —
rhq-core-plugindoc affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-plugindoc —
rhq-core-util affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-core-util —
rhq-filetemplate-bundle-common affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-filetemplate-bundle-common —
rhq-helpers affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-helpers —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-platform-plugin —
rhq-pluginAnnotations affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-pluginAnnotations —
rhq-pluginGen affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-pluginGen —
rhq-plugins-parent affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-plugins-parent —
rhq-plugin-validator affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-plugin-validator —
rhq-rtfilter affected Red Hat:jboss_enterprise_web_platform:5::el6 rhq-rtfilter —
spring2 affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_web_platform:5::el6 spring2-core —
wss4j affected Red Hat:jboss_enterprise_web_platform:5::el6 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_web_platform:5::el6 xerces-j2 —
xerces-j2-scripts affected Red Hat:jboss_enterprise_web_platform:5::el6 xerces-j2-scripts —
xml-commons affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_web_platform:5::el6 xml-security —
Upstream advisory

RHSA-2013:0193

GoogleExploitedVulnCheck KEV listed2013-01-24

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_application_platform:5::el4 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_application_platform:5::el4 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_application_platform:5::el4 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_application_platform:5::el4 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_application_platform:5::el4 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_application_platform:5::el4 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 hibernate3-search-javadoc —
hornetq affected Red Hat:jboss_enterprise_application_platform:5::el4 hornetq —
hornetq-native affected Red Hat:jboss_enterprise_application_platform:5::el4 hornetq-native —
hornetq-native-debuginfo affected Red Hat:jboss_enterprise_application_platform:5::el4 hornetq-native-debuginfo —
jacorb-jboss affected Red Hat:jboss_enterprise_application_platform:5::el4 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_application_platform:5::el4 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-aop2 —
jbossas affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas —
jbossas-client affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-client —
jbossas-hornetq affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-hornetq —
jbossas-messaging affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-messaging —
jbossas-tp-licenses affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-tp-licenses —
jbossas-ws-cxf affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-ws-cxf —
jbossas-ws-native affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossas-ws-native —
jboss-bootstrap affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-logmanager —
jboss-messaging affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-messaging —
jboss-naming affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_application_platform:5::el4 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_application_platform:5::el4 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_application_platform:5::el4 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_application_platform:5::el4 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_application_platform:5::el4 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_application_platform:5::el4 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_application_platform:5::el4 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_application_platform:5::el4 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-native —
mod_cluster-native-debuginfo affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-native-debuginfo —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_application_platform:5::el4 mod_cluster-tomcat6 —
netty affected Red Hat:jboss_enterprise_application_platform:5::el4 netty —
picketlink-federation affected Red Hat:jboss_enterprise_application_platform:5::el4 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_application_platform:5::el4 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_application_platform:5::el4 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_application_platform:5::el4 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_application_platform:5::el4 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_application_platform:5::el4 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_application_platform:5::el4 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el4 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_application_platform:5::el4 resteasy-manual —
rh-eap-docs affected Red Hat:jboss_enterprise_application_platform:5::el4 rh-eap-docs —
rh-eap-docs-examples affected Red Hat:jboss_enterprise_application_platform:5::el4 rh-eap-docs-examples —
rhq affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq —
rhq-common-parent affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-comm-api —
rhq-core-domain affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-plugin-container —
rhq-core-util affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-core-util —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-platform-plugin —
rhq-plugins-parent affected Red Hat:jboss_enterprise_application_platform:5::el4 rhq-plugins-parent —
spring2 affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_application_platform:5::el4 spring2-core —
wss4j affected Red Hat:jboss_enterprise_application_platform:5::el4 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_application_platform:5::el4 xerces-j2 —
xml-commons affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_application_platform:5::el4 xml-security —
Upstream advisory

RHSA-2013:0191

GoogleExploitedVulnCheck KEV listed2013-01-24

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_application_platform:5::el6 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_application_platform:5::el6 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_application_platform:5::el6 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_application_platform:5::el6 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_application_platform:5::el6 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_application_platform:5::el6 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 hibernate3-search-javadoc —
hornetq affected Red Hat:jboss_enterprise_application_platform:5::el6 hornetq —
hornetq-native affected Red Hat:jboss_enterprise_application_platform:5::el6 hornetq-native —
hsqldb affected Red Hat:jboss_enterprise_application_platform:5::el6 hsqldb —
jacorb-jboss affected Red Hat:jboss_enterprise_application_platform:5::el6 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_application_platform:5::el6 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-aop2 —
jbossas affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas —
jbossas-client affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-client —
jbossas-hornetq affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-hornetq —
jbossas-messaging affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-messaging —
jbossas-tp-licenses affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-tp-licenses —
jbossas-ws-cxf affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-ws-cxf —
jbossas-ws-native affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossas-ws-native —
jboss-bootstrap affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-logmanager —
jboss-messaging affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-messaging —
jboss-naming affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_application_platform:5::el6 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_application_platform:5::el6 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_application_platform:5::el6 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_application_platform:5::el6 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_application_platform:5::el6 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_application_platform:5::el6 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_application_platform:5::el6 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_application_platform:5::el6 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster-native —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_application_platform:5::el6 mod_cluster-tomcat6 —
netty affected Red Hat:jboss_enterprise_application_platform:5::el6 netty —
picketlink-federation affected Red Hat:jboss_enterprise_application_platform:5::el6 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_application_platform:5::el6 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_application_platform:5::el6 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_application_platform:5::el6 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_application_platform:5::el6 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_application_platform:5::el6 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_application_platform:5::el6 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el6 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_application_platform:5::el6 resteasy-manual —
rh-eap-docs affected Red Hat:jboss_enterprise_application_platform:5::el6 rh-eap-docs —
rh-eap-docs-examples affected Red Hat:jboss_enterprise_application_platform:5::el6 rh-eap-docs-examples —
rhq affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq —
rhq-ant-bundle-common affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-ant-bundle-common —
rhq-common-parent affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-comm-api —
rhq-core-dbutils affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-dbutils —
rhq-core-domain affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-plugin-container —
rhq-core-plugindoc affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-plugindoc —
rhq-core-util affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-core-util —
rhq-filetemplate-bundle-common affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-filetemplate-bundle-common —
rhq-helpers affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-helpers —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-platform-plugin —
rhq-pluginAnnotations affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-pluginAnnotations —
rhq-pluginGen affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-pluginGen —
rhq-plugins-parent affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-plugins-parent —
rhq-plugin-validator affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-plugin-validator —
rhq-rtfilter affected Red Hat:jboss_enterprise_application_platform:5::el6 rhq-rtfilter —
spring2 affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_application_platform:5::el6 spring2-core —
wss4j affected Red Hat:jboss_enterprise_application_platform:5::el6 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_application_platform:5::el6 xerces-j2 —
xerces-j2-scripts affected Red Hat:jboss_enterprise_application_platform:5::el6 xerces-j2-scripts —
xml-commons affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_application_platform:5::el6 xml-security —
Upstream advisory

RHSA-2013:0192

GoogleExploitedVulnCheck KEV listed2013-01-24

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.2.0 update

Affected products

ProductStatusVendorPackageEcosystem
aopalliance affected Red Hat:jboss_enterprise_application_platform:5::el5 aopalliance —
apache-cxf affected Red Hat:jboss_enterprise_application_platform:5::el5 apache-cxf —
bsh2 affected Red Hat:jboss_enterprise_application_platform:5::el5 bsh2 —
bsh2-bsf affected Red Hat:jboss_enterprise_application_platform:5::el5 bsh2-bsf —
glassfish-jaxb affected Red Hat:jboss_enterprise_application_platform:5::el5 glassfish-jaxb —
google-guice affected Red Hat:jboss_enterprise_application_platform:5::el5 google-guice —
hibernate3 affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3 —
hibernate3-annotations affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-annotations —
hibernate3-annotations-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-annotations-javadoc —
hibernate3-entitymanager affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-entitymanager —
hibernate3-entitymanager-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-entitymanager-javadoc —
hibernate3-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-javadoc —
hibernate3-search affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-search —
hibernate3-search-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 hibernate3-search-javadoc —
hornetq affected Red Hat:jboss_enterprise_application_platform:5::el5 hornetq —
hornetq-native affected Red Hat:jboss_enterprise_application_platform:5::el5 hornetq-native —
jacorb-jboss affected Red Hat:jboss_enterprise_application_platform:5::el5 jacorb-jboss —
javassist affected Red Hat:jboss_enterprise_application_platform:5::el5 javassist —
jboss-aop2 affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-aop2 —
jbossas affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas —
jbossas-client affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-client —
jbossas-hornetq affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-hornetq —
jbossas-messaging affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-messaging —
jbossas-tp-licenses affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-tp-licenses —
jbossas-ws-cxf affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-ws-cxf —
jbossas-ws-native affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossas-ws-native —
jboss-bootstrap affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-bootstrap —
jboss-cache-core affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-cache-core —
jboss-cache-pojo affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-cache-pojo —
jboss-cl affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-cl —
jboss-cluster-ha-server-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-cluster-ha-server-api —
jboss-common-beans affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-common-beans —
jboss-common-core affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-common-core —
jboss-eap5-native affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-eap5-native —
jboss-ejb-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb-3.0-api —
jboss-ejb3-cache affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-cache —
jboss-ejb3-core affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-core —
jboss-ejb3-ext-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-ext-api —
jboss-ejb3-ext-api-impl affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-ext-api-impl —
jboss-ejb3-interceptors affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-interceptors —
jboss-ejb3-metadata affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-metadata —
jboss-ejb3-metrics-deployer affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-metrics-deployer —
jboss-ejb3-security affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-security —
jboss-ejb3-timeout affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-timeout —
jboss-ejb3-timeout-3.0-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-timeout-3.0-api —
jboss-ejb3-timeout-spi affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-timeout-spi —
jboss-ejb3-transactions affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-ejb3-transactions —
jboss-jacc-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jacc-1.1-api —
jboss-jad-1.2-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jad-1.2-api —
jboss-jaspi-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jaspi-1.0-api —
jboss-javaee affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-javaee —
jboss-javaee-poms affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-javaee-poms —
jboss-jaxrpc-api_1.1_spec affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jaxrpc-api_1.1_spec —
jboss-jca-1.5-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jca-1.5-api —
jboss-jms-1.1-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jms-1.1-api —
jboss-jpa-deployers affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-jpa-deployers —
jboss-logmanager affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-logmanager —
jboss-messaging affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-messaging —
jboss-naming affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-naming —
jboss-reflect affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-reflect —
jboss-remoting affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-remoting —
jboss-seam2 affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-seam2 —
jboss-seam2-docs affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-seam2-docs —
jboss-seam2-examples affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-seam2-examples —
jboss-seam2-runtime affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-seam2-runtime —
jboss-security-negotiation affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-security-negotiation —
jboss-security-spi affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-security-spi —
jbosssx2 affected Red Hat:jboss_enterprise_application_platform:5::el5 jbosssx2 —
jboss-transaction-1.0.1-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-transaction-1.0.1-api —
jbossts affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossts —
jbossts-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossts-javadoc —
jboss-vfs2 affected Red Hat:jboss_enterprise_application_platform:5::el5 jboss-vfs2 —
jbossweb affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossweb —
jbossweb-el-1.0-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossweb-el-1.0-api —
jbossweb-jsp-2.1-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossweb-jsp-2.1-api —
jbossweb-lib affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossweb-lib —
jbossweb-servlet-2.5-api affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossweb-servlet-2.5-api —
jbossws affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossws —
jbossws-common affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossws-common —
jbossws-framework affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossws-framework —
jbossws-spi affected Red Hat:jboss_enterprise_application_platform:5::el5 jbossws-spi —
jgroups affected Red Hat:jboss_enterprise_application_platform:5::el5 jgroups —
jopr-embedded affected Red Hat:jboss_enterprise_application_platform:5::el5 jopr-embedded —
jopr-hibernate-plugin affected Red Hat:jboss_enterprise_application_platform:5::el5 jopr-hibernate-plugin —
jopr-jboss-as-5-plugin affected Red Hat:jboss_enterprise_application_platform:5::el5 jopr-jboss-as-5-plugin —
jopr-jboss-cache-v3-plugin affected Red Hat:jboss_enterprise_application_platform:5::el5 jopr-jboss-cache-v3-plugin —
mod_cluster affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster —
mod_cluster-demo affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster-demo —
mod_cluster-jbossas affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster-jbossas —
mod_cluster-jbossweb2 affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster-jbossweb2 —
mod_cluster-native affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster-native —
mod_cluster-tomcat6 affected Red Hat:jboss_enterprise_application_platform:5::el5 mod_cluster-tomcat6 —
netty affected Red Hat:jboss_enterprise_application_platform:5::el5 netty —
picketlink-federation affected Red Hat:jboss_enterprise_application_platform:5::el5 picketlink-federation —
picketlink-quickstarts affected Red Hat:jboss_enterprise_application_platform:5::el5 picketlink-quickstarts —
picketlink-quickstarts-idp affected Red Hat:jboss_enterprise_application_platform:5::el5 picketlink-quickstarts-idp —
picketlink-quickstarts-pdp affected Red Hat:jboss_enterprise_application_platform:5::el5 picketlink-quickstarts-pdp —
picketlink-quickstarts-sts affected Red Hat:jboss_enterprise_application_platform:5::el5 picketlink-quickstarts-sts —
resteasy affected Red Hat:jboss_enterprise_application_platform:5::el5 resteasy —
resteasy-examples affected Red Hat:jboss_enterprise_application_platform:5::el5 resteasy-examples —
resteasy-javadoc affected Red Hat:jboss_enterprise_application_platform:5::el5 resteasy-javadoc —
resteasy-manual affected Red Hat:jboss_enterprise_application_platform:5::el5 resteasy-manual —
rh-eap-docs affected Red Hat:jboss_enterprise_application_platform:5::el5 rh-eap-docs —
rh-eap-docs-examples affected Red Hat:jboss_enterprise_application_platform:5::el5 rh-eap-docs-examples —
rhq affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq —
rhq-ant-bundle-common affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-ant-bundle-common —
rhq-common-parent affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-common-parent —
rhq-core-client-api affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-client-api —
rhq-core-comm-api affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-comm-api —
rhq-core-dbutils affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-dbutils —
rhq-core-domain affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-domain —
rhq-core-gui affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-gui —
rhq-core-native-system affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-native-system —
rhq-core-parent affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-parent —
rhq-core-plugin-api affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-plugin-api —
rhq-core-plugin-container affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-plugin-container —
rhq-core-plugindoc affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-plugindoc —
rhq-core-util affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-core-util —
rhq-filetemplate-bundle-common affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-filetemplate-bundle-common —
rhq-helpers affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-helpers —
rhq-jboss-as-common affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-jboss-as-common —
rhq-jmx-plugin affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-jmx-plugin —
rhq-modules-parent affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-modules-parent —
rhq-parent affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-parent —
rhq-platform-plugin affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-platform-plugin —
rhq-pluginAnnotations affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-pluginAnnotations —
rhq-pluginGen affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-pluginGen —
rhq-plugins-parent affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-plugins-parent —
rhq-plugin-validator affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-plugin-validator —
rhq-rtfilter affected Red Hat:jboss_enterprise_application_platform:5::el5 rhq-rtfilter —
spring2 affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2 —
spring2-agent affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-agent —
spring2-all affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-all —
spring2-aop affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-aop —
spring2-beans affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-beans —
spring2-context affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-context —
spring2-core affected Red Hat:jboss_enterprise_application_platform:5::el5 spring2-core —
wss4j affected Red Hat:jboss_enterprise_application_platform:5::el5 wss4j —
xerces-j2 affected Red Hat:jboss_enterprise_application_platform:5::el5 xerces-j2 —
xerces-j2-scripts affected Red Hat:jboss_enterprise_application_platform:5::el5 xerces-j2-scripts —
xml-commons affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons —
xml-commons-jaxp-1.1-apis affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-jaxp-1.1-apis —
xml-commons-jaxp-1.2-apis affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-jaxp-1.2-apis —
xml-commons-jaxp-1.3-apis affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-jaxp-1.3-apis —
xml-commons-resolver10 affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-resolver10 —
xml-commons-resolver11 affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-resolver11 —
xml-commons-resolver12 affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-resolver12 —
xml-commons-which10 affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-which10 —
xml-commons-which11 affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-commons-which11 —
xml-security affected Red Hat:jboss_enterprise_application_platform:5::el5 xml-security —
Upstream advisory

CVE-2012-4915

GoogleActive exploitation (sightings)HIGH2013-01-03

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.

CVEs:CVE-2012-4915

Affected products

ProductStatusVendorPackageEcosystem
google_doc_embedder affected davistribe — —
Upstream advisory

CVE-2013-0630

Open SourceEPSS <= 49%HIGH2013-01-09

Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x before 11.2.202.261 on Linux, before 11.1.111.31 on Android 2.x and 3.x, and before 11.1.115.36 on Android 4.x; A...

CVEs:CVE-2013-0630

Affected products

ProductStatusVendorPackageEcosystem
adobe_air affected adobe — —
adobe_air_sdk affected adobe — —
flash_player affected adobe — —
flash_player_for_android affected adobe — —
Upstream advisory

CVE-2013-0828

GoogleEPSS <= 49%HIGH2013-01-11

The PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an unspecified variable during processing of the root of the structure tree, which allows remote attackers to cause a denial of service or possibly have unkn...

CVEs:CVE-2013-0828

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5157

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.

CVEs:CVE-2012-5157

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2013-0831

GoogleEPSS <= 49%HIGH2013-01-11

Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.

CVEs:CVE-2013-0831

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0843

GoogleEPSS <= 49%CRITICAL2013-01-23

content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service (memory corruption and app...

CVEs:CVE-2013-0843

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5145

GoogleEPSS <= 49%CRITICAL2013-01-11

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.

CVEs:CVE-2012-5145

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0839

GoogleEPSS <= 49%CRITICAL2013-01-23

Use-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of fonts in CANVAS elements.

CVEs:CVE-2013-0839

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2013-0833

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.

CVEs:CVE-2013-0833

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0834

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.

CVEs:CVE-2013-0834

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0835

GoogleEPSS <= 49%HIGH2013-01-11

Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors.

CVEs:CVE-2013-0835

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0841

GoogleEPSS <= 49%HIGH2013-01-23

Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVEs:CVE-2013-0841

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5147

GoogleEPSS <= 49%CRITICAL2013-01-11

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.

CVEs:CVE-2012-5147

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2012-5149

GoogleEPSS <= 49%CRITICAL2013-01-11

Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVEs:CVE-2012-5149

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0832

GoogleEPSS <= 49%CRITICAL2013-01-11

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.

CVEs:CVE-2013-0832

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0837

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.

CVEs:CVE-2013-0837

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2012-5152

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data.

CVEs:CVE-2012-5152

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2012-5153

GoogleEPSS <= 49%HIGH2013-01-11

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory.

CVEs:CVE-2012-5153

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2012-5150

GoogleEPSS <= 49%CRITICAL2013-01-11

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data.

CVEs:CVE-2012-5150

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0836

GoogleEPSS <= 49%HIGH2013-01-11

Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafte...

CVEs:CVE-2013-0836

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
v8 affected google — —
Upstream advisory

CVE-2012-5156

GoogleEPSS <= 49%CRITICAL2013-01-11

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF fields.

CVEs:CVE-2012-5156

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2013-0840

GoogleEPSS <= 49%HIGH2013-01-23

Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors.

CVEs:CVE-2013-0840

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2013-0842

GoogleEPSS <= 49%HIGH2013-01-23

Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors.

CVEs:CVE-2013-0842

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5146

GoogleEPSS <= 49%MEDIUM2013-01-11

Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.

CVEs:CVE-2012-5146

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0829

GoogleEPSS <= 49%MEDIUM2013-01-11

Google Chrome before 24.0.1312.52 does not properly maintain database metadata, which allows remote attackers to bypass intended file-access restrictions via unspecified vectors.

CVEs:CVE-2013-0829

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5151

GoogleEPSS <= 49%CRITICAL2013-01-11

Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code in a PDF document.

CVEs:CVE-2012-5151

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5148

GoogleEPSS <= 49%HIGH2013-01-11

The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.

CVEs:CVE-2012-5148

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0838

GoogleEPSS <= 49%HIGH2013-01-11

Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors.

CVEs:CVE-2013-0838

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

CVE-2012-5154

GoogleEPSS <= 49%CRITICAL2013-01-11

Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory.

CVEs:CVE-2012-5154

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2013-0830

GoogleEPSS <= 49%HIGH2013-01-11

The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors.

CVEs:CVE-2013-0830

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
opensuse affected opensuse — —
Upstream advisory

CVE-2012-5155

GoogleEPSS <= 49%MEDIUM2013-01-11

Google Chrome before 24.0.1312.52 on Mac OS X does not use an appropriate sandboxing approach for worker processes, which makes it easier for remote attackers to bypass intended access restrictions via unspecified vectors.

CVEs:CVE-2012-5155

Affected products

ProductStatusVendorPackageEcosystem
chrome affected google — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.