Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...
CVEs:CVE-2020-0096
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0096
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 8 security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| eap7-activemq-artemis | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis | — |
| eap7-activemq-artemis-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-cli | — |
| eap7-activemq-artemis-commons | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-commons | — |
| eap7-activemq-artemis-core-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-core-client | — |
| eap7-activemq-artemis-dto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-dto | — |
| eap7-activemq-artemis-hornetq-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-hornetq-protocol | — |
| eap7-activemq-artemis-hqclient-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-hqclient-protocol | — |
| eap7-activemq-artemis-jdbc-store | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-jdbc-store | — |
| eap7-activemq-artemis-jms-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-jms-client | — |
| eap7-activemq-artemis-jms-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-jms-server | — |
| eap7-activemq-artemis-journal | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-journal | — |
| eap7-activemq-artemis-ra | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-ra | — |
| eap7-activemq-artemis-selector | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-selector | — |
| eap7-activemq-artemis-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-server | — |
| eap7-activemq-artemis-service-extensions | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-service-extensions | — |
| eap7-activemq-artemis-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-activemq-artemis-tools | — |
| eap7-apache-cxf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-apache-cxf | — |
| eap7-apache-cxf-rt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-apache-cxf-rt | — |
| eap7-apache-cxf-services | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-apache-cxf-services | — |
| eap7-apache-cxf-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-apache-cxf-tools | — |
| eap7-bouncycastle | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-bouncycastle | — |
| eap7-bouncycastle-mail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-bouncycastle-mail | — |
| eap7-bouncycastle-pkix | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-bouncycastle-pkix | — |
| eap7-bouncycastle-prov | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-bouncycastle-prov | — |
| eap7-codehaus-jackson | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-codehaus-jackson | — |
| eap7-codehaus-jackson-core-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-codehaus-jackson-core-asl | — |
| eap7-codehaus-jackson-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-codehaus-jackson-jaxrs | — |
| eap7-codehaus-jackson-mapper-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-codehaus-jackson-mapper-asl | — |
| eap7-codehaus-jackson-xc | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-codehaus-jackson-xc | — |
| eap7-cryptacular | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-cryptacular | — |
| eap7-glassfish-el | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-glassfish-el | — |
| eap7-glassfish-el-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-glassfish-el-impl | — |
| eap7-glassfish-javamail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-glassfish-javamail | — |
| eap7-glassfish-jsf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-glassfish-jsf | — |
| eap7-hal-console | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hal-console | — |
| eap7-hibernate-commons-annotations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-commons-annotations | — |
| eap7-hibernate-search | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search | — |
| eap7-hibernate-search-backend-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search-backend-jgroups | — |
| eap7-hibernate-search-backend-jms | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search-backend-jms | — |
| eap7-hibernate-search-engine | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search-engine | — |
| eap7-hibernate-search-orm | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search-orm | — |
| eap7-hibernate-search-serialization-avro | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-hibernate-search-serialization-avro | — |
| eap7-httpcomponents-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-httpcomponents-client | — |
| eap7-httpcomponents-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-httpcomponents-core | — |
| eap7-jackson-databind | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jackson-databind | — |
| eap7-jasypt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jasypt | — |
| eap7-javaee-security-soteria | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-javaee-security-soteria | — |
| eap7-javaee-security-soteria-enterprise | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-javaee-security-soteria-enterprise | — |
| eap7-jaxbintros | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jaxbintros | — |
| eap7-jboss-batch-api_1.0_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-batch-api_1.0_spec | — |
| eap7-jboss-classfilewriter | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-classfilewriter | — |
| eap7-jboss-common-beans | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-common-beans | — |
| eap7-jboss-ejb-api_3.2_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-ejb-api_3.2_spec | — |
| eap7-jboss-ejb-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-ejb-client | — |
| eap7-jboss-invocation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-invocation | — |
| eap7-jboss-jsf-api_2.3_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-jsf-api_2.3_spec | — |
| eap7-jboss-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-modules | — |
| eap7-jboss-openjdk-orb | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-openjdk-orb | — |
| eap7-jboss-remoting | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-remoting | — |
| eap7-jboss-remoting-jmx | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-remoting-jmx | — |
| eap7-jboss-security-negotiation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-security-negotiation | — |
| eap7-jboss-server-migration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration | — |
| eap7-jboss-server-migration-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-cli | — |
| eap7-jboss-server-migration-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-core | — |
| eap7-jboss-server-migration-eap6.4 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap6.4 | — |
| eap7-jboss-server-migration-eap6.4-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap6.4-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap7.0 | — |
| eap7-jboss-server-migration-eap7.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap7.0-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap7.1 | — |
| eap7-jboss-server-migration-eap7.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap7.1-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly10.0 | — |
| eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly10.1 | — |
| eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly11.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly11.0 | — |
| eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly12.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly12.0 | — |
| eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly13.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly13.0-server | — |
| eap7-jboss-server-migration-wildfly14.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly14.0-server | — |
| eap7-jboss-server-migration-wildfly8.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly8.2 | — |
| eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly9.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly9.0 | — |
| eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | — |
| eap7-jboss-threads | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-threads | — |
| eap7-jboss-websocket-api_1.1_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jboss-websocket-api_1.1_spec | — |
| eap7-jbossws-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jbossws-common | — |
| eap7-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jgroups | — |
| eap7-jgroups-azure | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jgroups-azure | — |
| eap7-jgroups-kubernetes | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-jgroups-kubernetes | — |
| eap7-mod_cluster | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-mod_cluster | — |
| eap7-narayana | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana | — |
| eap7-narayana-compensations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-compensations | — |
| eap7-narayana-jbosstxbridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-jbosstxbridge | — |
| eap7-narayana-jbossxts | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-jbossxts | — |
| eap7-narayana-jts-idlj | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-jts-idlj | — |
| eap7-narayana-jts-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-jts-integration | — |
| eap7-narayana-restat-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-restat-api | — |
| eap7-narayana-restat-bridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-restat-bridge | — |
| eap7-narayana-restat-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-restat-integration | — |
| eap7-narayana-restat-util | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-restat-util | — |
| eap7-narayana-txframework | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-narayana-txframework | — |
| eap7-opensaml | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml | — |
| eap7-opensaml-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-core | — |
| eap7-opensaml-profile-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-profile-api | — |
| eap7-opensaml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-saml-api | — |
| eap7-opensaml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-saml-impl | — |
| eap7-opensaml-security-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-security-api | — |
| eap7-opensaml-security-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-security-impl | — |
| eap7-opensaml-soap-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-soap-api | — |
| eap7-opensaml-xacml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xacml-api | — |
| eap7-opensaml-xacml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xacml-impl | — |
| eap7-opensaml-xacml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xacml-saml-api | — |
| eap7-opensaml-xacml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xacml-saml-impl | — |
| eap7-opensaml-xmlsec-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xmlsec-api | — |
| eap7-opensaml-xmlsec-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-opensaml-xmlsec-impl | — |
| eap7-picketbox | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-picketbox | — |
| eap7-picketbox-infinispan | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-picketbox-infinispan | — |
| eap7-resteasy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy | — |
| eap7-resteasy-atom-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-atom-provider | — |
| eap7-resteasy-cdi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-cdi | — |
| eap7-resteasy-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-client | — |
| eap7-resteasy-client-microprofile | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-client-microprofile | — |
| eap7-resteasy-crypto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-crypto | — |
| eap7-resteasy-jackson2-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jackson2-provider | — |
| eap7-resteasy-jackson-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jackson-provider | — |
| eap7-resteasy-jaxb-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jaxb-provider | — |
| eap7-resteasy-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jaxrs | — |
| eap7-resteasy-jettison-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jettison-provider | — |
| eap7-resteasy-jose-jwt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jose-jwt | — |
| eap7-resteasy-jsapi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-jsapi | — |
| eap7-resteasy-json-binding-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-json-binding-provider | — |
| eap7-resteasy-json-p-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-json-p-provider | — |
| eap7-resteasy-multipart-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-multipart-provider | — |
| eap7-resteasy-rxjava2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-rxjava2 | — |
| eap7-resteasy-spring | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-spring | — |
| eap7-resteasy-validator-provider-11 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-validator-provider-11 | — |
| eap7-resteasy-yaml-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-resteasy-yaml-provider | — |
| eap7-slf4j-jboss-logmanager | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-slf4j-jboss-logmanager | — |
| eap7-smallrye-config | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-smallrye-config | — |
| eap7-smallrye-health | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-smallrye-health | — |
| eap7-undertow | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-undertow | — |
| eap7-weld-cdi-2.0-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-weld-cdi-2.0-api | — |
| eap7-wildfly | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly | — |
| eap7-wildfly-elytron | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly-elytron | — |
| eap7-wildfly-javadocs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly-javadocs | — |
| eap7-wildfly-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly-modules | — |
| eap7-wildfly-naming-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly-naming-client | — |
| eap7-wildfly-transaction-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wildfly-transaction-client | — |
| eap7-ws-commons-XmlSchema | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-ws-commons-XmlSchema | — |
| eap7-wss4j | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j | — |
| eap7-wss4j-bindings | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-bindings | — |
| eap7-wss4j-policy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-policy | — |
| eap7-wss4j-ws-security-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-ws-security-common | — |
| eap7-wss4j-ws-security-dom | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-ws-security-dom | — |
| eap7-wss4j-ws-security-policy-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-ws-security-policy-stax | — |
| eap7-wss4j-ws-security-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el8 | eap7-wss4j-ws-security-stax | — |
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 7 security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| eap7-activemq-artemis | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis | — |
| eap7-activemq-artemis-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-cli | — |
| eap7-activemq-artemis-commons | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-commons | — |
| eap7-activemq-artemis-core-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-core-client | — |
| eap7-activemq-artemis-dto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-dto | — |
| eap7-activemq-artemis-hornetq-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-hornetq-protocol | — |
| eap7-activemq-artemis-hqclient-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-hqclient-protocol | — |
| eap7-activemq-artemis-jdbc-store | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-jdbc-store | — |
| eap7-activemq-artemis-jms-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-jms-client | — |
| eap7-activemq-artemis-jms-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-jms-server | — |
| eap7-activemq-artemis-journal | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-journal | — |
| eap7-activemq-artemis-ra | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-ra | — |
| eap7-activemq-artemis-selector | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-selector | — |
| eap7-activemq-artemis-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-server | — |
| eap7-activemq-artemis-service-extensions | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-service-extensions | — |
| eap7-activemq-artemis-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-activemq-artemis-tools | — |
| eap7-apache-cxf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-apache-cxf | — |
| eap7-apache-cxf-rt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-apache-cxf-rt | — |
| eap7-apache-cxf-services | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-apache-cxf-services | — |
| eap7-apache-cxf-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-apache-cxf-tools | — |
| eap7-bouncycastle | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-bouncycastle | — |
| eap7-bouncycastle-mail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-bouncycastle-mail | — |
| eap7-bouncycastle-pkix | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-bouncycastle-pkix | — |
| eap7-bouncycastle-prov | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-bouncycastle-prov | — |
| eap7-codehaus-jackson | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-codehaus-jackson | — |
| eap7-codehaus-jackson-core-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-codehaus-jackson-core-asl | — |
| eap7-codehaus-jackson-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-codehaus-jackson-jaxrs | — |
| eap7-codehaus-jackson-mapper-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-codehaus-jackson-mapper-asl | — |
| eap7-codehaus-jackson-xc | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-codehaus-jackson-xc | — |
| eap7-cryptacular | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-cryptacular | — |
| eap7-glassfish-el | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-glassfish-el | — |
| eap7-glassfish-el-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-glassfish-el-impl | — |
| eap7-glassfish-javamail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-glassfish-javamail | — |
| eap7-glassfish-jsf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-glassfish-jsf | — |
| eap7-hal-console | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hal-console | — |
| eap7-hibernate-commons-annotations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-commons-annotations | — |
| eap7-hibernate-search | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search | — |
| eap7-hibernate-search-backend-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search-backend-jgroups | — |
| eap7-hibernate-search-backend-jms | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search-backend-jms | — |
| eap7-hibernate-search-engine | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search-engine | — |
| eap7-hibernate-search-orm | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search-orm | — |
| eap7-hibernate-search-serialization-avro | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-hibernate-search-serialization-avro | — |
| eap7-httpcomponents-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-httpcomponents-client | — |
| eap7-httpcomponents-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-httpcomponents-core | — |
| eap7-jackson-databind | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jackson-databind | — |
| eap7-jasypt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jasypt | — |
| eap7-javaee-security-soteria | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-javaee-security-soteria | — |
| eap7-javaee-security-soteria-enterprise | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-javaee-security-soteria-enterprise | — |
| eap7-jaxbintros | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jaxbintros | — |
| eap7-jboss-batch-api_1.0_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-batch-api_1.0_spec | — |
| eap7-jboss-classfilewriter | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-classfilewriter | — |
| eap7-jboss-common-beans | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-common-beans | — |
| eap7-jboss-ejb-api_3.2_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-ejb-api_3.2_spec | — |
| eap7-jboss-ejb-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-ejb-client | — |
| eap7-jboss-invocation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-invocation | — |
| eap7-jboss-jsf-api_2.3_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-jsf-api_2.3_spec | — |
| eap7-jboss-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-modules | — |
| eap7-jboss-openjdk-orb | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-openjdk-orb | — |
| eap7-jboss-remoting | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-remoting | — |
| eap7-jboss-remoting-jmx | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-remoting-jmx | — |
| eap7-jboss-security-negotiation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-security-negotiation | — |
| eap7-jboss-server-migration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration | — |
| eap7-jboss-server-migration-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-cli | — |
| eap7-jboss-server-migration-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-core | — |
| eap7-jboss-server-migration-eap6.4 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap6.4 | — |
| eap7-jboss-server-migration-eap6.4-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap6.4-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap7.0 | — |
| eap7-jboss-server-migration-eap7.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap7.0-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap7.1 | — |
| eap7-jboss-server-migration-eap7.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap7.1-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly10.0 | — |
| eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly10.1 | — |
| eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly11.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly11.0 | — |
| eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly12.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly12.0 | — |
| eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly13.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly13.0-server | — |
| eap7-jboss-server-migration-wildfly14.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly14.0-server | — |
| eap7-jboss-server-migration-wildfly8.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly8.2 | — |
| eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly9.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly9.0 | — |
| eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | — |
| eap7-jboss-threads | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-threads | — |
| eap7-jboss-websocket-api_1.1_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jboss-websocket-api_1.1_spec | — |
| eap7-jbossws-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jbossws-common | — |
| eap7-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jgroups | — |
| eap7-jgroups-azure | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jgroups-azure | — |
| eap7-jgroups-kubernetes | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-jgroups-kubernetes | — |
| eap7-mod_cluster | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-mod_cluster | — |
| eap7-narayana | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana | — |
| eap7-narayana-compensations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-compensations | — |
| eap7-narayana-jbosstxbridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-jbosstxbridge | — |
| eap7-narayana-jbossxts | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-jbossxts | — |
| eap7-narayana-jts-idlj | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-jts-idlj | — |
| eap7-narayana-jts-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-jts-integration | — |
| eap7-narayana-restat-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-restat-api | — |
| eap7-narayana-restat-bridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-restat-bridge | — |
| eap7-narayana-restat-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-restat-integration | — |
| eap7-narayana-restat-util | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-restat-util | — |
| eap7-narayana-txframework | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-narayana-txframework | — |
| eap7-opensaml | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml | — |
| eap7-opensaml-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-core | — |
| eap7-opensaml-profile-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-profile-api | — |
| eap7-opensaml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-saml-api | — |
| eap7-opensaml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-saml-impl | — |
| eap7-opensaml-security-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-security-api | — |
| eap7-opensaml-security-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-security-impl | — |
| eap7-opensaml-soap-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-soap-api | — |
| eap7-opensaml-xacml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xacml-api | — |
| eap7-opensaml-xacml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xacml-impl | — |
| eap7-opensaml-xacml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xacml-saml-api | — |
| eap7-opensaml-xacml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xacml-saml-impl | — |
| eap7-opensaml-xmlsec-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xmlsec-api | — |
| eap7-opensaml-xmlsec-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-opensaml-xmlsec-impl | — |
| eap7-picketbox | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-picketbox | — |
| eap7-picketbox-infinispan | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-picketbox-infinispan | — |
| eap7-resteasy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy | — |
| eap7-resteasy-atom-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-atom-provider | — |
| eap7-resteasy-cdi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-cdi | — |
| eap7-resteasy-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-client | — |
| eap7-resteasy-client-microprofile | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-client-microprofile | — |
| eap7-resteasy-crypto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-crypto | — |
| eap7-resteasy-jackson2-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jackson2-provider | — |
| eap7-resteasy-jackson-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jackson-provider | — |
| eap7-resteasy-jaxb-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jaxb-provider | — |
| eap7-resteasy-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jaxrs | — |
| eap7-resteasy-jettison-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jettison-provider | — |
| eap7-resteasy-jose-jwt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jose-jwt | — |
| eap7-resteasy-jsapi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-jsapi | — |
| eap7-resteasy-json-binding-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-json-binding-provider | — |
| eap7-resteasy-json-p-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-json-p-provider | — |
| eap7-resteasy-multipart-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-multipart-provider | — |
| eap7-resteasy-rxjava2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-rxjava2 | — |
| eap7-resteasy-spring | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-spring | — |
| eap7-resteasy-validator-provider-11 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-validator-provider-11 | — |
| eap7-resteasy-yaml-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-resteasy-yaml-provider | — |
| eap7-slf4j-jboss-logmanager | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-slf4j-jboss-logmanager | — |
| eap7-smallrye-config | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-smallrye-config | — |
| eap7-smallrye-health | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-smallrye-health | — |
| eap7-undertow | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-undertow | — |
| eap7-weld-cdi-2.0-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-weld-cdi-2.0-api | — |
| eap7-wildfly | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly | — |
| eap7-wildfly-elytron | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-elytron | — |
| eap7-wildfly-javadocs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-javadocs | — |
| eap7-wildfly-java-jdk11 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-java-jdk11 | — |
| eap7-wildfly-java-jdk8 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-java-jdk8 | — |
| eap7-wildfly-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-modules | — |
| eap7-wildfly-naming-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-naming-client | — |
| eap7-wildfly-transaction-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wildfly-transaction-client | — |
| eap7-ws-commons-XmlSchema | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-ws-commons-XmlSchema | — |
| eap7-wss4j | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j | — |
| eap7-wss4j-bindings | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-bindings | — |
| eap7-wss4j-policy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-policy | — |
| eap7-wss4j-ws-security-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-ws-security-common | — |
| eap7-wss4j-ws-security-dom | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-ws-security-dom | — |
| eap7-wss4j-ws-security-policy-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-ws-security-policy-stax | — |
| eap7-wss4j-ws-security-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el7 | eap7-wss4j-ws-security-stax | — |
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.2.8 on RHEL 6 security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| eap7-activemq-artemis | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis | — |
| eap7-activemq-artemis-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-cli | — |
| eap7-activemq-artemis-commons | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-commons | — |
| eap7-activemq-artemis-core-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-core-client | — |
| eap7-activemq-artemis-dto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-dto | — |
| eap7-activemq-artemis-hornetq-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-hornetq-protocol | — |
| eap7-activemq-artemis-hqclient-protocol | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-hqclient-protocol | — |
| eap7-activemq-artemis-jdbc-store | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-jdbc-store | — |
| eap7-activemq-artemis-jms-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-jms-client | — |
| eap7-activemq-artemis-jms-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-jms-server | — |
| eap7-activemq-artemis-journal | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-journal | — |
| eap7-activemq-artemis-ra | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-ra | — |
| eap7-activemq-artemis-selector | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-selector | — |
| eap7-activemq-artemis-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-server | — |
| eap7-activemq-artemis-service-extensions | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-service-extensions | — |
| eap7-activemq-artemis-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-activemq-artemis-tools | — |
| eap7-apache-cxf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-apache-cxf | — |
| eap7-apache-cxf-rt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-apache-cxf-rt | — |
| eap7-apache-cxf-services | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-apache-cxf-services | — |
| eap7-apache-cxf-tools | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-apache-cxf-tools | — |
| eap7-bouncycastle | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-bouncycastle | — |
| eap7-bouncycastle-mail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-bouncycastle-mail | — |
| eap7-bouncycastle-pkix | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-bouncycastle-pkix | — |
| eap7-bouncycastle-prov | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-bouncycastle-prov | — |
| eap7-codehaus-jackson | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-codehaus-jackson | — |
| eap7-codehaus-jackson-core-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-codehaus-jackson-core-asl | — |
| eap7-codehaus-jackson-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-codehaus-jackson-jaxrs | — |
| eap7-codehaus-jackson-mapper-asl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-codehaus-jackson-mapper-asl | — |
| eap7-codehaus-jackson-xc | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-codehaus-jackson-xc | — |
| eap7-cryptacular | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-cryptacular | — |
| eap7-glassfish-el | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-glassfish-el | — |
| eap7-glassfish-el-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-glassfish-el-impl | — |
| eap7-glassfish-javamail | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-glassfish-javamail | — |
| eap7-glassfish-jsf | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-glassfish-jsf | — |
| eap7-hal-console | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hal-console | — |
| eap7-hibernate-commons-annotations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-commons-annotations | — |
| eap7-hibernate-search | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search | — |
| eap7-hibernate-search-backend-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search-backend-jgroups | — |
| eap7-hibernate-search-backend-jms | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search-backend-jms | — |
| eap7-hibernate-search-engine | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search-engine | — |
| eap7-hibernate-search-orm | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search-orm | — |
| eap7-hibernate-search-serialization-avro | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-hibernate-search-serialization-avro | — |
| eap7-httpcomponents-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-httpcomponents-client | — |
| eap7-httpcomponents-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-httpcomponents-core | — |
| eap7-jackson-databind | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jackson-databind | — |
| eap7-jasypt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jasypt | — |
| eap7-javaee-security-soteria | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-javaee-security-soteria | — |
| eap7-javaee-security-soteria-enterprise | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-javaee-security-soteria-enterprise | — |
| eap7-jaxbintros | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jaxbintros | — |
| eap7-jboss-batch-api_1.0_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-batch-api_1.0_spec | — |
| eap7-jboss-classfilewriter | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-classfilewriter | — |
| eap7-jboss-common-beans | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-common-beans | — |
| eap7-jboss-ejb-api_3.2_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-ejb-api_3.2_spec | — |
| eap7-jboss-ejb-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-ejb-client | — |
| eap7-jboss-invocation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-invocation | — |
| eap7-jboss-jsf-api_2.3_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-jsf-api_2.3_spec | — |
| eap7-jboss-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-modules | — |
| eap7-jboss-openjdk-orb | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-openjdk-orb | — |
| eap7-jboss-remoting | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-remoting | — |
| eap7-jboss-remoting-jmx | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-remoting-jmx | — |
| eap7-jboss-security-negotiation | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-security-negotiation | — |
| eap7-jboss-server-migration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration | — |
| eap7-jboss-server-migration-cli | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-cli | — |
| eap7-jboss-server-migration-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-core | — |
| eap7-jboss-server-migration-eap6.4 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap6.4 | — |
| eap7-jboss-server-migration-eap6.4-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap6.4-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap7.0 | — |
| eap7-jboss-server-migration-eap7.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap7.0-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap7.1 | — |
| eap7-jboss-server-migration-eap7.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap7.1-to-eap7.2 | — |
| eap7-jboss-server-migration-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly10.0 | — |
| eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly10.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly10.1 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly10.1 | — |
| eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly10.1-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly11.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly11.0 | — |
| eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly11.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly12.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly12.0 | — |
| eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly12.0-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly13.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly13.0-server | — |
| eap7-jboss-server-migration-wildfly14.0-server | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly14.0-server | — |
| eap7-jboss-server-migration-wildfly8.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly8.2 | — |
| eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly8.2-to-eap7.2 | — |
| eap7-jboss-server-migration-wildfly9.0 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly9.0 | — |
| eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-server-migration-wildfly9.0-to-eap7.2 | — |
| eap7-jboss-threads | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-threads | — |
| eap7-jboss-websocket-api_1.1_spec | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jboss-websocket-api_1.1_spec | — |
| eap7-jbossws-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jbossws-common | — |
| eap7-jgroups | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jgroups | — |
| eap7-jgroups-azure | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jgroups-azure | — |
| eap7-jgroups-kubernetes | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-jgroups-kubernetes | — |
| eap7-mod_cluster | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-mod_cluster | — |
| eap7-narayana | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana | — |
| eap7-narayana-compensations | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-compensations | — |
| eap7-narayana-jbosstxbridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-jbosstxbridge | — |
| eap7-narayana-jbossxts | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-jbossxts | — |
| eap7-narayana-jts-idlj | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-jts-idlj | — |
| eap7-narayana-jts-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-jts-integration | — |
| eap7-narayana-restat-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-restat-api | — |
| eap7-narayana-restat-bridge | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-restat-bridge | — |
| eap7-narayana-restat-integration | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-restat-integration | — |
| eap7-narayana-restat-util | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-restat-util | — |
| eap7-narayana-txframework | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-narayana-txframework | — |
| eap7-opensaml | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml | — |
| eap7-opensaml-core | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-core | — |
| eap7-opensaml-profile-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-profile-api | — |
| eap7-opensaml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-saml-api | — |
| eap7-opensaml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-saml-impl | — |
| eap7-opensaml-security-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-security-api | — |
| eap7-opensaml-security-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-security-impl | — |
| eap7-opensaml-soap-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-soap-api | — |
| eap7-opensaml-xacml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xacml-api | — |
| eap7-opensaml-xacml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xacml-impl | — |
| eap7-opensaml-xacml-saml-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xacml-saml-api | — |
| eap7-opensaml-xacml-saml-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xacml-saml-impl | — |
| eap7-opensaml-xmlsec-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xmlsec-api | — |
| eap7-opensaml-xmlsec-impl | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-opensaml-xmlsec-impl | — |
| eap7-picketbox | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-picketbox | — |
| eap7-picketbox-infinispan | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-picketbox-infinispan | — |
| eap7-resteasy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy | — |
| eap7-resteasy-atom-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-atom-provider | — |
| eap7-resteasy-cdi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-cdi | — |
| eap7-resteasy-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-client | — |
| eap7-resteasy-client-microprofile | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-client-microprofile | — |
| eap7-resteasy-crypto | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-crypto | — |
| eap7-resteasy-jackson2-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jackson2-provider | — |
| eap7-resteasy-jackson-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jackson-provider | — |
| eap7-resteasy-jaxb-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jaxb-provider | — |
| eap7-resteasy-jaxrs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jaxrs | — |
| eap7-resteasy-jettison-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jettison-provider | — |
| eap7-resteasy-jose-jwt | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jose-jwt | — |
| eap7-resteasy-jsapi | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-jsapi | — |
| eap7-resteasy-json-binding-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-json-binding-provider | — |
| eap7-resteasy-json-p-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-json-p-provider | — |
| eap7-resteasy-multipart-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-multipart-provider | — |
| eap7-resteasy-rxjava2 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-rxjava2 | — |
| eap7-resteasy-spring | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-spring | — |
| eap7-resteasy-validator-provider-11 | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-validator-provider-11 | — |
| eap7-resteasy-yaml-provider | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-resteasy-yaml-provider | — |
| eap7-slf4j-jboss-logmanager | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-slf4j-jboss-logmanager | — |
| eap7-smallrye-config | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-smallrye-config | — |
| eap7-smallrye-health | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-smallrye-health | — |
| eap7-undertow | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-undertow | — |
| eap7-weld-cdi-2.0-api | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-weld-cdi-2.0-api | — |
| eap7-wildfly | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly | — |
| eap7-wildfly-elytron | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly-elytron | — |
| eap7-wildfly-javadocs | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly-javadocs | — |
| eap7-wildfly-modules | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly-modules | — |
| eap7-wildfly-naming-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly-naming-client | — |
| eap7-wildfly-transaction-client | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wildfly-transaction-client | — |
| eap7-ws-commons-XmlSchema | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-ws-commons-XmlSchema | — |
| eap7-wss4j | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j | — |
| eap7-wss4j-bindings | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-bindings | — |
| eap7-wss4j-policy | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-policy | — |
| eap7-wss4j-ws-security-common | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-ws-security-common | — |
| eap7-wss4j-ws-security-dom | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-ws-security-dom | — |
| eap7-wss4j-ws-security-policy-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-ws-security-policy-stax | — |
| eap7-wss4j-ws-security-stax | affected | Red Hat:jboss_enterprise_application_platform:7.2::el6 | eap7-wss4j-ws-security-stax | — |
DEBIAN-CVE-2020-6468
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2020-6468
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6468
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. Arbitrary code execution can occur via the bootloader because of an EL1/EL3 coldboot vulnerability involving raw_resources. The LG ID is LVE-SMP-200006 (May...
CVEs:CVE-2020-12753
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12753
In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploit...
CVEs:CVE-2020-0097
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0097
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP1 | chromium | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP1 | chromium | — |
| chromium | affected | openSUSE:Leap 15.1 | chromium | — |
DEBIAN-CVE-2020-6458
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2020-6831
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| firefox-esr | affected | Debian:11 | firefox-esr | — |
| firefox-esr | affected | Debian:12 | firefox-esr | — |
| firefox-esr | affected | Debian:13 | firefox-esr | — |
| firefox-esr | affected | Debian:14 | firefox-esr | — |
| thunderbird | affected | Debian:11 | thunderbird | — |
| thunderbird | affected | Debian:12 | thunderbird | — |
| thunderbird | affected | Debian:13 | thunderbird | — |
| thunderbird | affected | Debian:14 | thunderbird | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP1 | chromium | — |
Updated chromium-browser-stable packages fix security vulnerabilities
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:7 | chromium-browser-stable | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | openSUSE:Leap 15.1 | chromium | — |
CVEs:CVE-2020-8899
There is a buffer overwrite vulnerability in the Quram qmg library of Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0). An unauthenticated, unauthorized attacker sending a specially crafted MMS to a vulnerable phone can trigger a heap-based buf...
CVEs:CVE-2020-8899
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-6463
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2020-6463
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
| ubuntu_linux | affected | canonical | — | — |
DEBIAN-CVE-2020-6463
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| firefox-esr | affected | Debian:11 | firefox-esr | — |
| firefox-esr | affected | Debian:12 | firefox-esr | — |
| firefox-esr | affected | Debian:13 | firefox-esr | — |
| firefox-esr | affected | Debian:14 | firefox-esr | — |
| thunderbird | affected | Debian:11 | thunderbird | — |
| thunderbird | affected | Debian:12 | thunderbird | — |
| thunderbird | affected | Debian:13 | thunderbird | — |
| thunderbird | affected | Debian:14 | thunderbird | — |
DEBIAN-CVE-2020-6464
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6464
Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2020-6464
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6473
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVEs:CVE-2020-6473
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6473
DEBIAN-CVE-2020-6474
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2020-6474
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6474
DEBIAN-CVE-2020-6485
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6485
Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVEs:CVE-2020-6485
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6467
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVEs:CVE-2020-6467
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6467
DEBIAN-CVE-2020-6475
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6475
Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVEs:CVE-2020-6475
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6483
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVEs:CVE-2020-6483
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6483
DEBIAN-CVE-2020-6486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6486
Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVEs:CVE-2020-6486
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6489
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive information from disk via a crafted H...
CVEs:CVE-2020-6489
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6489
In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Prod...
CVEs:CVE-2020-0103
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0103
DEBIAN-CVE-2020-6487
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6487
Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVEs:CVE-2020-6487
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6465
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2020-6466
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVEs:CVE-2020-6465
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6465
Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVEs:CVE-2020-6466
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6466
DEBIAN-CVE-2020-6479
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
DEBIAN-CVE-2020-6478
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6478
Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVEs:CVE-2020-6478
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6479
Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page.
CVEs:CVE-2020-6479
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6488
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVEs:CVE-2020-6488
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6488
DEBIAN-CVE-2020-6481
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name.
CVEs:CVE-2020-6481
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6481
DEBIAN-CVE-2020-6484
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.
CVEs:CVE-2020-6484
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6484
DEBIAN-CVE-2020-6472
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Ch...
CVEs:CVE-2020-6472
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6472
DEBIAN-CVE-2020-6491
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6491
Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name.
CVEs:CVE-2020-6491
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6490
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.
CVEs:CVE-2020-6490
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6471
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6471
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVEs:CVE-2020-6471
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6462
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Updated chromium-browser-stable packages fix security vulnerabilities
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium-browser-stable | affected | Mageia:7 | chromium-browser-stable | — |
DEBIAN-CVE-2020-6482
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
DEBIAN-CVE-2020-6476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6476
Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
CVEs:CVE-2020-6476
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
CVEs:CVE-2020-6482
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6482
DEBIAN-CVE-2020-6457
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
DEBIAN-CVE-2020-6480
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2020-6480
Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.
CVEs:CVE-2020-6480
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
DEBIAN-CVE-2020-6461
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2020-6469
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
CVEs:CVE-2020-6469
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6469
CVEs:CVE-2020-12746
An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos chipsets) software. Attackers can bypass the Secure Bootloader protection mechanism via a heap-based buffer overflow to execute arbitrary code. The Samsung ID is...
CVEs:CVE-2020-12746
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
DEBIAN-CVE-2020-6459
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems.
CVEs:CVE-2020-7645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome-launcher | affected | — | — |
chrome-launcher subject to OS Command Injection
CVEs:CVE-2020-7645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome-launcher | affected | npm | chrome-launcher | — |
chrome-launcher subject to OS Command Injection
CVEs:CVE-2020-7645
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome-launcher | affected | npm | chrome-launcher | — |
DEBIAN-CVE-2020-6470
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.
CVEs:CVE-2020-6470
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| debian_linux | affected | debian | — | — |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-6470
DEBIAN-CVE-2020-6460
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, ...
CVEs:CVE-2020-6616
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| ipados | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| mac_os_x | affected | apple | — | — |
CVEs:CVE-2020-6616
1. IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication....
CVEs:CVE-2020-12142
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nx-1000_firmware | affected | silver-peak | — | — |
| nx-10k_firmware | affected | silver-peak | — | — |
| nx-11k_firmware | affected | silver-peak | — | — |
| nx-2000_firmware | affected | silver-peak | — | — |
| nx-3000_firmware | affected | silver-peak | — | — |
| nx-5000_firmware | affected | silver-peak | — | — |
| nx-6000_firmware | affected | silver-peak | — | — |
| nx-7000_firmware | affected | silver-peak | — | — |
| nx-700_firmware | affected | silver-peak | — | — |
| nx-8000_firmware | affected | silver-peak | — | — |
| nx-9000_firmware | affected | silver-peak | — | — |
| unity_edgeconnect_for_amazon_web_services | affected | silver-peak | — | — |
| unity_edgeconnect_for_azure | affected | silver-peak | — | — |
| unity_edgeconnect_for_google_cloud_platform | affected | silver-peak | — | — |
| unity_orchestrator | affected | silver-peak | — | — |
| vx-1000_firmware | affected | silver-peak | — | — |
| vx-2000_firmware | affected | silver-peak | — | — |
| vx-3000_firmware | affected | silver-peak | — | — |
| vx-5000_firmware | affected | silver-peak | — | — |
| vx-500_firmware | affected | silver-peak | — | — |
| vx-6000_firmware | affected | silver-peak | — | — |
| vx-7000_firmware | affected | silver-peak | — | — |
| vx-8000_firmware | affected | silver-peak | — | — |
| vx-9000_firmware | affected | silver-peak | — | — |
CVEs:CVE-2020-12142
An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. Attackers can determine user credentials via a brute-force attack against the Gatekeeper trustlet. The Samsung ID is SVE-2020-16908 (May 2020).
CVEs:CVE-2020-12752
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12752
Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: And...
CVEs:CVE-2020-0221
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0221
CVEs:CVE-2020-12751
An issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Sam...
CVEs:CVE-2020-12751
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
An issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830 chipsets) software. The Bootloader has a heap-based buffer overflow because of the mishandling of specific commands. The Samsung IDs are SVE-2020-16981, S...
CVEs:CVE-2020-12747
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12747
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and access clipboard content via USSD. The Samsung ID is SVE-2019-16556 (May 2020).
CVEs:CVE-2020-12745
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12745
CVEs:CVE-2020-8896
A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted key to read data past the end of the buffer used to ...
CVEs:CVE-2020-8896
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| earth | affected | — | — |
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via SPEN. The Samsung ID is SVE-2020-17019 (May 2020).
CVEs:CVE-2020-12750
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12750
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.
CVEs:CVE-2020-12144
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nx-1000_firmware | affected | silver-peak | — | — |
| nx-10k_firmware | affected | silver-peak | — | — |
| nx-11k_firmware | affected | silver-peak | — | — |
| nx-2000_firmware | affected | silver-peak | — | — |
| nx-3000_firmware | affected | silver-peak | — | — |
| nx-5000_firmware | affected | silver-peak | — | — |
| nx-6000_firmware | affected | silver-peak | — | — |
| nx-7000_firmware | affected | silver-peak | — | — |
| nx-700_firmware | affected | silver-peak | — | — |
| nx-8000_firmware | affected | silver-peak | — | — |
| nx-9000_firmware | affected | silver-peak | — | — |
| unity_edgeconnect_for_amazon_web_services | affected | silver-peak | — | — |
| unity_edgeconnect_for_azure | affected | silver-peak | — | — |
| unity_edgeconnect_for_google_cloud_platform | affected | silver-peak | — | — |
| unity_orchestrator | affected | silver-peak | — | — |
| vx-1000_firmware | affected | silver-peak | — | — |
| vx-2000_firmware | affected | silver-peak | — | — |
| vx-3000_firmware | affected | silver-peak | — | — |
| vx-5000_firmware | affected | silver-peak | — | — |
| vx-500_firmware | affected | silver-peak | — | — |
| vx-6000_firmware | affected | silver-peak | — | — |
| vx-7000_firmware | affected | silver-peak | — | — |
| vx-8000_firmware | affected | silver-peak | — | — |
| vx-9000_firmware | affected | silver-peak | — | — |
CVEs:CVE-2020-12144
CVEs:CVE-2020-12143
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator.
CVEs:CVE-2020-12143
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| nx-1000_firmware | affected | silver-peak | — | — |
| nx-10k_firmware | affected | silver-peak | — | — |
| nx-11k_firmware | affected | silver-peak | — | — |
| nx-2000_firmware | affected | silver-peak | — | — |
| nx-3000_firmware | affected | silver-peak | — | — |
| nx-5000_firmware | affected | silver-peak | — | — |
| nx-6000_firmware | affected | silver-peak | — | — |
| nx-7000_firmware | affected | silver-peak | — | — |
| nx-700_firmware | affected | silver-peak | — | — |
| nx-8000_firmware | affected | silver-peak | — | — |
| nx-9000_firmware | affected | silver-peak | — | — |
| unity_edgeconnect_for_amazon_web_services | affected | silver-peak | — | — |
| unity_edgeconnect_for_azure | affected | silver-peak | — | — |
| unity_edgeconnect_for_google_cloud_platform | affected | silver-peak | — | — |
| unity_orchestrator | affected | silver-peak | — | — |
| vx-1000_firmware | affected | silver-peak | — | — |
| vx-2000_firmware | affected | silver-peak | — | — |
| vx-3000_firmware | affected | silver-peak | — | — |
| vx-5000_firmware | affected | silver-peak | — | — |
| vx-500_firmware | affected | silver-peak | — | — |
| vx-6000_firmware | affected | silver-peak | — | — |
| vx-7000_firmware | affected | silver-peak | — | — |
| vx-8000_firmware | affected | silver-peak | — | — |
| vx-9000_firmware | affected | silver-peak | — | — |
An issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the locked-state protection mechanism and designate a different preferred SIM card. The Samsung ID is SVE-2020-16594 (May 2020).
CVEs:CVE-2020-12748
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12748
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitati...
CVEs:CVE-2020-0093
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| debian_linux | affected | debian | — | — |
| leap | affected | opensuse | — | — |
| libexif | affected | libexif_project | — | — |
| ubuntu_linux | affected | canonical | — | — |
CVEs:CVE-2020-0093
CVEs:CVE-2020-12754
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A crafted application can obtain control of device input via the window system service. The LG ID is LVE-SMP-170011 (May 2020).
CVEs:CVE-2020-12754
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-6477
Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.
CVEs:CVE-2020-6477
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| backports_sle | affected | opensuse | — | — |
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
| leap | affected | opensuse | — | — |
CVEs:CVE-2020-0110
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Andr...
CVEs:CVE-2020-0110
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| core_i3-1000g1_firmware | affected | intel | — | — |
| core_i3-1000g4_firmware | affected | intel | — | — |
| core_i3-1005g1_firmware | affected | intel | — | — |
| core_i3-10100e_firmware | affected | intel | — | — |
| core_i3-10100f_firmware | affected | intel | — | — |
| core_i3-10100_firmware | affected | intel | — | — |
| core_i3-10100te_firmware | affected | intel | — | — |
| core_i3-10100t_firmware | affected | intel | — | — |
| core_i3-10100y_firmware | affected | intel | — | — |
| core_i3-10105f_firmware | affected | intel | — | — |
| core_i3-10105_firmware | affected | intel | — | — |
| core_i3-10105t_firmware | affected | intel | — | — |
| core_i3-10110u_firmware | affected | intel | — | — |
| core_i3-10110y_firmware | affected | intel | — | — |
| core_i3-10300_firmware | affected | intel | — | — |
| core_i3-10300t_firmware | affected | intel | — | — |
| core_i3-10305_firmware | affected | intel | — | — |
| core_i3-10305t_firmware | affected | intel | — | — |
| core_i3-10320_firmware | affected | intel | — | — |
| core_i3-10325_firmware | affected | intel | — | — |
| core_i3-11100he_firmware | affected | intel | — | — |
| core_i3-1110g4_firmware | affected | intel | — | — |
| core_i3-1115g4e_firmware | affected | intel | — | — |
| core_i3-1115g4_firmware | affected | intel | — | — |
| core_i3-1115gre_firmware | affected | intel | — | — |
| core_i3-1120g4_firmware | affected | intel | — | — |
| core_i3-1125g4_firmware | affected | intel | — | — |
| core_i5-10200h_firmware | affected | intel | — | — |
| core_i5-10210u_firmware | affected | intel | — | — |
| core_i5-10210y_firmware | affected | intel | — | — |
| core_i5-10300h_firmware | affected | intel | — | — |
| core_i5-1030g4_firmware | affected | intel | — | — |
| core_i5-1030g7_firmware | affected | intel | — | — |
| core_i5-10310u_firmware | affected | intel | — | — |
| core_i5-10310y_firmware | affected | intel | — | — |
| core_i5-1035g1_firmware | affected | intel | — | — |
| core_i5-1035g4_firmware | affected | intel | — | — |
| core_i5-1035g7_firmware | affected | intel | — | — |
| core_i5-1038ng7_firmware | affected | intel | — | — |
| core_i5-10400f_firmware | affected | intel | — | — |
| core_i5-10400_firmware | affected | intel | — | — |
| core_i5-10400h_firmware | affected | intel | — | — |
| core_i5-10400t_firmware | affected | intel | — | — |
| core_i5-10500e_firmware | affected | intel | — | — |
| core_i5-10500_firmware | affected | intel | — | — |
| core_i5-10500h_firmware | affected | intel | — | — |
| core_i5-10500te_firmware | affected | intel | — | — |
| core_i5-10500t_firmware | affected | intel | — | — |
| core_i5-10505_firmware | affected | intel | — | — |
| core_i5-10600_firmware | affected | intel | — | — |
| core_i5-10600kf_firmware | affected | intel | — | — |
| core_i5-10600k_firmware | affected | intel | — | — |
| core_i5-10600t_firmware | affected | intel | — | — |
| core_i5-11260h_firmware | affected | intel | — | — |
| core_i5-11300h_firmware | affected | intel | — | — |
| core_i5-1130g7_firmware | affected | intel | — | — |
| core_i5-11320h_firmware | affected | intel | — | — |
| core_i5-1135g7_firmware | affected | intel | — | — |
| core_i5-11400f_firmware | affected | intel | — | — |
| core_i5-11400_firmware | affected | intel | — | — |
| core_i5-11400h_firmware | affected | intel | — | — |
| core_i5-11400t_firmware | affected | intel | — | — |
| core_i5-1140g7_firmware | affected | intel | — | — |
| core_i5-1145g7e_firmware | affected | intel | — | — |
| core_i5-1145g7_firmware | affected | intel | — | — |
| core_i5-1145gre_firmware | affected | intel | — | — |
| core_i5-11500_firmware | affected | intel | — | — |
| core_i5-11500he_firmware | affected | intel | — | — |
| core_i5-11500h_firmware | affected | intel | — | — |
| core_i5-11500t_firmware | affected | intel | — | — |
| core_i5-1155g7_firmware | affected | intel | — | — |
| core_i5-11600_firmware | affected | intel | — | — |
| core_i5-11600kf_firmware | affected | intel | — | — |
| core_i5-11600k_firmware | affected | intel | — | — |
| core_i5-11600t_firmware | affected | intel | — | — |
| core_i7-10510u_firmware | affected | intel | — | — |
| core_i7-10510y_firmware | affected | intel | — | — |
| core_i7-1060g7_firmware | affected | intel | — | — |
| core_i7-10610u_firmware | affected | intel | — | — |
| core_i7-1065g7_firmware | affected | intel | — | — |
| core_i7-1068ng7_firmware | affected | intel | — | — |
| core_i7-10700e_firmware | affected | intel | — | — |
| core_i7-10700f_firmware | affected | intel | — | — |
| core_i7-10700_firmware | affected | intel | — | — |
| core_i7-10700kf_firmware | affected | intel | — | — |
| core_i7-10700k_firmware | affected | intel | — | — |
| core_i7-10700te_firmware | affected | intel | — | — |
| core_i7-10700t_firmware | affected | intel | — | — |
| core_i7-10710u_firmware | affected | intel | — | — |
| core_i7-10750h_firmware | affected | intel | — | — |
| core_i7-10810u_firmware | affected | intel | — | — |
| core_i7-10850h_firmware | affected | intel | — | — |
| core_i7-10870h_firmware | affected | intel | — | — |
| core_i7-10875h_firmware | affected | intel | — | — |
| core_i7-11370h_firmware | affected | intel | — | — |
| core_i7-11375h_firmware | affected | intel | — | — |
| core_i7-11390h_firmware | affected | intel | — | — |
| core_i7-11600h_firmware | affected | intel | — | — |
| core_i7-1160g7_firmware | affected | intel | — | — |
| core_i7-1165g7_firmware | affected | intel | — | — |
| core_i7-11700f_firmware | affected | intel | — | — |
| core_i7-11700_firmware | affected | intel | — | — |
| core_i7-11700kf_firmware | affected | intel | — | — |
| core_i7-11700k_firmware | affected | intel | — | — |
| core_i7-11700t_firmware | affected | intel | — | — |
| core_i7-11800h_firmware | affected | intel | — | — |
| core_i7-1180g7_firmware | affected | intel | — | — |
| core_i7-11850he_firmware | affected | intel | — | — |
| core_i7-11850h_firmware | affected | intel | — | — |
| core_i7-1185g7e_firmware | affected | intel | — | — |
| core_i7-1185g7_firmware | affected | intel | — | — |
| core_i7-1185gre_firmware | affected | intel | — | — |
| core_i7-1195g7_firmware | affected | intel | — | — |
| core_i9-10850k_firmware | affected | intel | — | — |
| core_i9-10885h_firmware | affected | intel | — | — |
| core_i9-10900e_firmware | affected | intel | — | — |
| core_i9-10900f_firmware | affected | intel | — | — |
| core_i9-10900_firmware | affected | intel | — | — |
| core_i9-10900kf_firmware | affected | intel | — | — |
| core_i9-10900k_firmware | affected | intel | — | — |
| core_i9-10900te_firmware | affected | intel | — | — |
| core_i9-10900t_firmware | affected | intel | — | — |
| core_i9-10980hk_firmware | affected | intel | — | — |
| core_i9-11900f_firmware | affected | intel | — | — |
| core_i9-11900_firmware | affected | intel | — | — |
| core_i9-11900h_firmware | affected | intel | — | — |
| core_i9-11900kf_firmware | affected | intel | — | — |
| core_i9-11900k_firmware | affected | intel | — | — |
| core_i9-11900t_firmware | affected | intel | — | — |
| core_i9-11950h_firmware | affected | intel | — | — |
| core_i9-11980hk_firmware | affected | intel | — | — |
| jhl6240_firmware | affected | intel | — | — |
| jhl6340_firmware | affected | intel | — | — |
| jhl6540_firmware | affected | intel | — | — |
| jhl7340_firmware | affected | intel | — | — |
| jhl7440_firmware | affected | intel | — | — |
| jhl7540_firmware | affected | intel | — | — |
| jhl8440_firmware | affected | intel | — | — |
| jhl8540_firmware | affected | intel | — | — |
In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...
CVEs:CVE-2020-0024
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0024
In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interact...
CVEs:CVE-2020-0104
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0104
CVEs:CVE-2020-0092
In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. Use...
CVEs:CVE-2020-0092
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...
CVEs:CVE-2020-0098
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0098
CVEs:CVE-2020-0094
In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not nee...
CVEs:CVE-2020-0094
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0220
In crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitat...
CVEs:CVE-2020-0220
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2020-0102
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0102
In onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error handling. This could lead to local information disclosure of data from a privileged process with no additional execution privileges needed. User interaction is no...
CVEs:CVE-2020-0100
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0100
An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S.LSI Wi-Fi drivers have a buffer overflow. The Samsung ID is SVE-2020-16906 (May 2020).
CVEs:CVE-2020-12749
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-12749
In onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check. This could lead to local escalation of privilege, allowing apps to use keyguard-bound keys when the screen is locked, with no additional execution privileges ...
CVEs:CVE-2020-0105
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0105
CVEs:CVE-2020-0109
In simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing permission check. This could lead to local escalation of privilege by creating fake system notifications with no additional execution privileges needed. User inte...
CVEs:CVE-2020-0109
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0101
In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Produ...
CVEs:CVE-2020-0101
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0064
An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855
CVEs:CVE-2020-0064
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0065
An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448
CVEs:CVE-2020-0065
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0090
An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048
CVEs:CVE-2020-0090
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0091
In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700
CVEs:CVE-2020-0091
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a missing SDK version check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed f...
CVEs:CVE-2020-0106
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2020-0106
Rejected CVE ID
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow | affected | PyPI | tensorflow | — |
Rejected CVE ID
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
PYSEC-2020-253
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
PYSEC-2020-269
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow-cpu | affected | PyPI | tensorflow-cpu | — |
PYSEC-2020-304
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
PYSEC-2020-304
CVEs:CVE-2018-21233
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow-cpu | affected | PyPI | tensorflow-cpu | — |
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decode_bmp_op.cc.
CVEs:CVE-2018-21233
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | — | — |
Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.
CVEs:CVE-2018-21233
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | PyPI | tensorflow | — |
| tensorflow-gpu | affected | PyPI | tensorflow-gpu | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.