{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Sterling Connect:Direct File Agent versions 1.4.x ant\u00e9rieures \u00e0 1.4.0.2_iFix042",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "BM Sterling Connect:Direct Web Services versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.17",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.4_iFix039",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM QRadar SIEM version 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP6",
      "product": {
        "name": "QRadar SIEM",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.2_iFix064",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.0.x ant\u00e9rieures \u00e0 6.0.0.4_iFix068",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connect:Direct Web Services versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.0_iFix007",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-21938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
    },
    {
      "name": "CVE-2021-3733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3733"
    },
    {
      "name": "CVE-2023-28708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28708"
    },
    {
      "name": "CVE-2023-21954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
    },
    {
      "name": "CVE-2023-21939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
    },
    {
      "name": "CVE-2021-23336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336"
    },
    {
      "name": "CVE-2023-1436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1436"
    },
    {
      "name": "CVE-2022-45061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
    },
    {
      "name": "CVE-2022-23521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23521"
    },
    {
      "name": "CVE-2022-42703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42703"
    },
    {
      "name": "CVE-2023-20861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20861"
    },
    {
      "name": "CVE-2022-41903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41903"
    },
    {
      "name": "CVE-2023-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
    },
    {
      "name": "CVE-2022-0391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0391"
    },
    {
      "name": "CVE-2020-26116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26116"
    },
    {
      "name": "CVE-2022-43750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-43750"
    },
    {
      "name": "CVE-2018-20060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20060"
    },
    {
      "name": "CVE-2022-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40149"
    },
    {
      "name": "CVE-2021-43138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43138"
    },
    {
      "name": "CVE-2023-0767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
    },
    {
      "name": "CVE-2015-0254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0254"
    },
    {
      "name": "CVE-2022-40150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40150"
    },
    {
      "name": "CVE-2022-45693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45693"
    },
    {
      "name": "CVE-2022-37434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
    },
    {
      "name": "CVE-2019-9740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9740"
    },
    {
      "name": "CVE-2022-4378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4378"
    },
    {
      "name": "CVE-2022-40151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40151"
    },
    {
      "name": "CVE-2023-21937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
    },
    {
      "name": "CVE-2021-3737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3737"
    },
    {
      "name": "CVE-2023-2597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2597"
    },
    {
      "name": "CVE-2022-42004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004"
    },
    {
      "name": "CVE-2023-25194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25194"
    },
    {
      "name": "CVE-2022-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38023"
    },
    {
      "name": "CVE-2023-20863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20863"
    },
    {
      "name": "CVE-2019-18348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18348"
    },
    {
      "name": "CVE-2022-45685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45685"
    },
    {
      "name": "CVE-2023-20859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20859"
    },
    {
      "name": "CVE-2022-34917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34917"
    },
    {
      "name": "CVE-2023-20860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20860"
    },
    {
      "name": "CVE-2016-10735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10735"
    },
    {
      "name": "CVE-2023-21968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
    },
    {
      "name": "CVE-2021-28861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28861"
    },
    {
      "name": "CVE-2023-21930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
    },
    {
      "name": "CVE-2023-24998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24998"
    },
    {
      "name": "CVE-2023-24329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
    },
    {
      "name": "CVE-2022-42003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003"
    },
    {
      "name": "CVE-2015-20107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-20107"
    },
    {
      "name": "CVE-2023-1999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1999"
    },
    {
      "name": "CVE-2023-21967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
    },
    {
      "name": "CVE-2019-8331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8331"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0513",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-07-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits \u003cspan\nclass=\"textit\"\u003eIBM\u003c/span\u003e. Elles permettent \u00e0 un attaquant de provoquer\nun contournement de la politique de s\u00e9curit\u00e9, un d\u00e9ni de service, une\ninjection de code indirecte \u00e0 distance (XSS), une \u00e9l\u00e9vation de\nprivil\u00e8ges, un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es et une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7010099 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7010099"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7009987 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7009987"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7009301 du 07 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7009301"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7010095 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7010095"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "IBM Sterling Connect:Direct File Agent versions 1.4.x ant\u00e9rieures \u00e0 1.4.0.2_iFix042",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "BM Sterling Connect:Direct Web Services versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.17",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.2.x ant\u00e9rieures \u00e0 6.2.0.4_iFix039",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM QRadar SIEM version 7.5.x ant\u00e9rieures \u00e0 7.5.0 UP6",
      "product": {
        "name": "QRadar SIEM",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.2_iFix064",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.0.x ant\u00e9rieures \u00e0 6.0.0.4_iFix068",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Connect:Direct Web Services versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.19",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "IBM Sterling Connect:Direct pour Microsoft Windows versions 6.3.x ant\u00e9rieures \u00e0 6.3.0.0_iFix007",
      "product": {
        "name": "Sterling Connect:Direct",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2023-21938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21938"
    },
    {
      "name": "CVE-2021-3733",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3733"
    },
    {
      "name": "CVE-2023-28708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28708"
    },
    {
      "name": "CVE-2023-21954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21954"
    },
    {
      "name": "CVE-2023-21939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21939"
    },
    {
      "name": "CVE-2021-23336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336"
    },
    {
      "name": "CVE-2023-1436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1436"
    },
    {
      "name": "CVE-2022-45061",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45061"
    },
    {
      "name": "CVE-2022-23521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23521"
    },
    {
      "name": "CVE-2022-42703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42703"
    },
    {
      "name": "CVE-2023-20861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20861"
    },
    {
      "name": "CVE-2022-41903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41903"
    },
    {
      "name": "CVE-2023-0286",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0286"
    },
    {
      "name": "CVE-2022-0391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0391"
    },
    {
      "name": "CVE-2020-26116",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-26116"
    },
    {
      "name": "CVE-2022-43750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-43750"
    },
    {
      "name": "CVE-2018-20060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-20060"
    },
    {
      "name": "CVE-2022-40149",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40149"
    },
    {
      "name": "CVE-2021-43138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43138"
    },
    {
      "name": "CVE-2023-0767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0767"
    },
    {
      "name": "CVE-2015-0254",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-0254"
    },
    {
      "name": "CVE-2022-40150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40150"
    },
    {
      "name": "CVE-2022-45693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45693"
    },
    {
      "name": "CVE-2022-37434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37434"
    },
    {
      "name": "CVE-2019-9740",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-9740"
    },
    {
      "name": "CVE-2022-4378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-4378"
    },
    {
      "name": "CVE-2022-40151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-40151"
    },
    {
      "name": "CVE-2023-21937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21937"
    },
    {
      "name": "CVE-2021-3737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3737"
    },
    {
      "name": "CVE-2023-2597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-2597"
    },
    {
      "name": "CVE-2022-42004",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42004"
    },
    {
      "name": "CVE-2023-25194",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25194"
    },
    {
      "name": "CVE-2022-38023",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38023"
    },
    {
      "name": "CVE-2023-20863",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20863"
    },
    {
      "name": "CVE-2019-18348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-18348"
    },
    {
      "name": "CVE-2022-45685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-45685"
    },
    {
      "name": "CVE-2023-20859",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20859"
    },
    {
      "name": "CVE-2022-34917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34917"
    },
    {
      "name": "CVE-2023-20860",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-20860"
    },
    {
      "name": "CVE-2016-10735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-10735"
    },
    {
      "name": "CVE-2023-21968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21968"
    },
    {
      "name": "CVE-2021-28861",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28861"
    },
    {
      "name": "CVE-2023-21930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21930"
    },
    {
      "name": "CVE-2023-24998",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24998"
    },
    {
      "name": "CVE-2023-24329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-24329"
    },
    {
      "name": "CVE-2022-42003",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-42003"
    },
    {
      "name": "CVE-2015-20107",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-20107"
    },
    {
      "name": "CVE-2023-1999",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-1999"
    },
    {
      "name": "CVE-2023-21967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-21967"
    },
    {
      "name": "CVE-2019-8331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-8331"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0513",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-07-07T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits \u003cspan\nclass=\"textit\"\u003eIBM\u003c/span\u003e. Elles permettent \u00e0 un attaquant de provoquer\nun contournement de la politique de s\u00e9curit\u00e9, un d\u00e9ni de service, une\ninjection de code indirecte \u00e0 distance (XSS), une \u00e9l\u00e9vation de\nprivil\u00e8ges, un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une\natteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es, une atteinte \u00e0 la confidentialit\u00e9\ndes donn\u00e9es et une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7010099 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7010099"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7009987 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7009987"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7009301 du 07 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7009301"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7010095 du 06 juillet 2023",
      "url": "https://www.ibm.com/support/pages/node/7010095"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "72809"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-0254"
    }
  },
  "description": "Apache Standard Taglibs\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u4e2aJSP\u6807\u51c6\u6807\u7b7e\u5e93\uff08JSTL\uff09\u89c4\u8303\u7684\u5b9e\u73b0\u3002\r\n\r\nApache Standard Taglibs XML\u5916\u90e8\u5b9e\u4f53\u5b58\u5728\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "David Jorm of IIX",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u5347\u7ea7\u8865\u4e01/\u7248\u672c\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u7528\u6237\u53ca\u65f6\u4e0b\u8f7d\u66f4\u65b0\uff1a\r\nhttp://www.apache.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-01459",
  "openTime": "2015-03-05",
  "patchDescription": "Apache Standard Taglibs\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u4e2aJSP\u6807\u51c6\u6807\u7b7e\u5e93\uff08JSTL\uff09\u89c4\u8303\u7684\u5b9e\u73b0\u3002\r\n\r\nApache Standard Taglibs XML\u5916\u90e8\u5b9e\u4f53\u5b58\u5728\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u5e94\u7528\u7a0b\u5e8f\u4e0a\u4e0b\u6587\u4e2d\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apache Standard Taglibs XML\u5916\u90e8\u5b9e\u4f53\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Apache Standard Taglibs 1.2.3"
  },
  "referenceLink": "http://www.securityfocus.com/bid/72809",
  "serverity": "\u4e2d",
  "submitTime": "2015-02-28",
  "title": "Apache Standard Taglibs XML\u5916\u90e8\u5b9e\u4f53\u6ce8\u5165\u6f0f\u6d1e"
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:standard_taglibs:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "647C861D-A337-4331-9F9E-47220AC2F757",
              "versionEndIncluding": "1.2.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "49A63F39-30BE-443F-AF10-6245587D3359",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag."
    },
    {
      "lang": "es",
      "value": "Apache Standard Taglibs anterior a 1.2.3 permite a atacantes remotos ejecutar c\u00f3digo arbitrario o realizar ataques de entidad externa XML (XXE) a trav\u00e9s de una extensi\u00f3n XSLT manipulada en una etiqueta (1)  o (2)  JSTL XML."
    }
  ],
  "evaluatorComment": "\u003ca href=\"http://cwe.mitre.org/data/definitions/611.html\" target=\"_blank\"\u003eCWE-611: Improper Restriction of XML External Entity Reference (\u0027XXE\u0027)\u003c/a\u003e",
  "id": "CVE-2015-0254",
  "lastModified": "2026-05-06T22:30:45.220",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-03-09T14:59:04.263",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1695.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1838.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1839.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1840.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1841.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/archive/1/534772/100/0/threaded"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/72809"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id/1034934"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2551-1"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://access.redhat.com/errata/RHSA-2016:1376"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f%40%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38%40%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077%40%3Cpluto-scm.portals.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.oracle.com//security-alerts/cpujul2021.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1695.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1838.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1839.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1840.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1841.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/534772/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/72809"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1034934"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://www.ubuntu.com/usn/USN-2551-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2016:1376"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f%40%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38%40%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077%40%3Cpluto-scm.portals.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d%40%3Cdev.tomcat.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.oracle.com//security-alerts/cpujul2021.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.apache.taglibs:taglibs-standard"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.apache.taglibs:taglibs-standard-impl"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2015-0254"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-611"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-09-14T18:42:48Z",
    "nvd_published_at": "2015-03-09T14:59:00Z",
    "severity": "HIGH"
  },
  "details": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.",
  "id": "GHSA-6x4w-8w53-xrvv",
  "modified": "2020-09-14T18:42:48Z",
  "published": "2020-09-14T18:44:01Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2016:1376"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914@%3Cdev.tomcat.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f@%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38@%3Cpluto-dev.portals.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077@%3Cpluto-scm.portals.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d@%3Cdev.tomcat.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html"
    },
    {
      "type": "WEB",
      "url": "http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2015-1695.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1838.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1839.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1840.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-1841.html"
    },
    {
      "type": "WEB",
      "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/534772/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/72809"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1034934"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-2551-1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "XXE in Apache Standard Taglibs"
}

{
  "GSD": {
    "alias": "CVE-2015-0254",
    "description": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.",
    "id": "GSD-2015-0254",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-0254.html",
      "https://access.redhat.com/errata/RHSA-2016:1841",
      "https://access.redhat.com/errata/RHSA-2016:1840",
      "https://access.redhat.com/errata/RHSA-2016:1839",
      "https://access.redhat.com/errata/RHSA-2016:1838",
      "https://access.redhat.com/errata/RHSA-2016:1376",
      "https://access.redhat.com/errata/RHSA-2016:0125",
      "https://access.redhat.com/errata/RHSA-2016:0124",
      "https://access.redhat.com/errata/RHSA-2016:0123",
      "https://access.redhat.com/errata/RHSA-2016:0122",
      "https://access.redhat.com/errata/RHSA-2016:0121",
      "https://access.redhat.com/errata/RHSA-2015:1695",
      "https://ubuntu.com/security/CVE-2015-0254",
      "https://advisories.mageia.org/CVE-2015-0254.html",
      "https://alas.aws.amazon.com/cve/html/CVE-2015-0254.html",
      "https://linux.oracle.com/cve/CVE-2015-0254.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-0254"
      ],
      "details": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.",
      "id": "GSD-2015-0254",
      "modified": "2023-12-13T01:19:57.993065Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2015-0254",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "USN-2551-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-2551-1"
          },
          {
            "name": "RHSA-2016:1376",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2016:1376"
          },
          {
            "name": "RHSA-2016:1841",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1841.html"
          },
          {
            "name": "[tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags",
            "refsource": "MLIST",
            "url": "http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E"
          },
          {
            "name": "RHSA-2016:1838",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1838.html"
          },
          {
            "name": "20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/534772/100/0/threaded"
          },
          {
            "name": "RHSA-2015:1695",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1695.html"
          },
          {
            "name": "RHSA-2016:1839",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1839.html"
          },
          {
            "name": "openSUSE-SU-2015:1751",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html"
          },
          {
            "name": "72809",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/72809"
          },
          {
            "name": "RHSA-2016:1840",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-1840.html"
          },
          {
            "name": "1034934",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1034934"
          },
          {
            "name": "[tomcat-dev] 20190319 svn commit: r1855831 [27/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914@%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200203 svn commit: r1873527 [27/30] - /tomcat/site/trunk/docs/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d@%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
            "refsource": "CONFIRM",
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
          },
          {
            "name": "[portals-pluto-dev] 20210714 [jira] [Closed] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38@%3Cpluto-dev.portals.apache.org%3E"
          },
          {
            "name": "[portals-pluto-scm] 20210714 [portals-pluto] branch master updated: PLUTO-792 Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077@%3Cpluto-scm.portals.apache.org%3E"
          },
          {
            "name": "[portals-pluto-dev] 20210714 [jira] [Created] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f@%3Cpluto-dev.portals.apache.org%3E"
          },
          {
            "name": "https://www.oracle.com//security-alerts/cpujul2021.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com//security-alerts/cpujul2021.html"
          },
          {
            "name": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html"
          }
        ]
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "(,1.2.1]",
          "affected_versions": "All versions up to 1.2.1",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2019-03-25",
          "description": "Apache Standard Taglibs allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) `\u003cx:parse\u003e` or (2) `\u003cx:transform\u003e` JSTL XML tag.",
          "fixed_versions": [
            "1.2.3"
          ],
          "identifier": "CVE-2015-0254",
          "identifiers": [
            "CVE-2015-0254"
          ],
          "not_impacted": "All versions after 1.2.1",
          "package_slug": "maven/org.apache.taglibs/taglibs-standard-impl",
          "pubdate": "2015-03-09",
          "solution": "Upgrade to version 1.2.3 or above.",
          "title": "Code Injection",
          "urls": [
            "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0254"
          ],
          "uuid": "887776ae-60fb-4694-97fe-c3c7c76d5dff"
        },
        {
          "affected_range": "(,1.2.2]",
          "affected_versions": "All versions up to 1.2.2",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2019-03-25",
          "description": "This package allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a `\u003cx:parse\u003e` or `\u003cx:transform\u003e` JSTL XML tag.",
          "fixed_versions": [
            "1.2.3"
          ],
          "identifier": "CVE-2015-0254",
          "identifiers": [
            "CVE-2015-0254"
          ],
          "not_impacted": "All versions after 1.2.2",
          "package_slug": "maven/org.apache.taglibs/taglibs-standard-spec",
          "pubdate": "2015-03-09",
          "solution": "Upgrade to version 1.2.3 or above.",
          "title": "XXE and RCE via XSL extensions in Apache Standard Taglibs",
          "urls": [
            "http://mail-archives.us.apache.org/mod_mbox/www-announce/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A@apache.org%3E",
            "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0254"
          ],
          "uuid": "82978cec-6873-4d56-ab0a-8a133f64d63f"
        },
        {
          "affected_range": "(,1.2.3)",
          "affected_versions": "All versions before 1.2.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "cwe_ids": [
            "CWE-1035",
            "CWE-78",
            "CWE-937"
          ],
          "date": "2021-07-22",
          "description": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.",
          "fixed_versions": [
            "1.2.3"
          ],
          "identifier": "CVE-2015-0254",
          "identifiers": [
            "GHSA-6x4w-8w53-xrvv",
            "CVE-2015-0254"
          ],
          "not_impacted": "All versions starting from 1.2.3",
          "package_slug": "maven/org.apache.taglibs/taglibs-standard",
          "pubdate": "2020-09-14",
          "solution": "Upgrade to version 1.2.3 or above.",
          "title": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2015-0254",
            "https://github.com/advisories/GHSA-6x4w-8w53-xrvv"
          ],
          "uuid": "aa3feba4-6857-447c-b2e8-76e5344cfdb4"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:standard_taglibs:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.2.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2015-0254"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://packetstormsecurity.com/files/130575/Apache-Standard-Taglibs-1.2.1-XXE-Remote-Command-Execution.html"
            },
            {
              "name": "72809",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/72809"
            },
            {
              "name": "[tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags",
              "refsource": "MLIST",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://mail-archives.apache.org/mod_mbox/tomcat-taglibs-user/201502.mbox/%3C82207A16-6348-4DEE-877E-F7B87292576A%40apache.org%3E"
            },
            {
              "name": "USN-2551-1",
              "refsource": "UBUNTU",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://www.ubuntu.com/usn/USN-2551-1"
            },
            {
              "name": "RHSA-2016:1838",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1838.html"
            },
            {
              "name": "RHSA-2016:1840",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1840.html"
            },
            {
              "name": "RHSA-2016:1841",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1841.html"
            },
            {
              "name": "RHSA-2016:1839",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-1839.html"
            },
            {
              "name": "1034934",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1034934"
            },
            {
              "name": "openSUSE-SU-2015:1751",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-updates/2015-10/msg00033.html"
            },
            {
              "name": "RHSA-2015:1695",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2015-1695.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
            },
            {
              "name": "RHSA-2016:1376",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2016:1376"
            },
            {
              "name": "20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/534772/100/0/threaded"
            },
            {
              "name": "[tomcat-dev] 20190319 svn commit: r1855831 [27/30] - in /tomcat/site/trunk: ./ docs/ xdocs/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/8a20e48acb2a40be5130df91cf9d39d8ad93181989413d4abcaa4914@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/f8e0814e11c7f21f42224b6de111cb3f5e5ab5c15b78924c516d4ec2@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200203 svn commit: r1873527 [27/30] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rfc2bfd99c340dafd501676693cd889c1f9f838b97bdd0776a8f5557d@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "[tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/re3b72cbb13e1dfe85c4a06959a3b6ca6d939b407ecca80db12b54220@%3Cdev.tomcat.apache.org%3E"
            },
            {
              "name": "N/A",
              "refsource": "N/A",
              "tags": [],
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "[portals-pluto-dev] 20210714 [jira] [Closed] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rc1686f6196bb9063bf26577a21b8033c19c1a30e5a9159869c8f3d38@%3Cpluto-dev.portals.apache.org%3E"
            },
            {
              "name": "[portals-pluto-scm] 20210714 [portals-pluto] branch master updated: PLUTO-792 Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/rf1179e6971bc46f0f68879a9a10cc97ad4424451b0889aeef04c8077@%3Cpluto-scm.portals.apache.org%3E"
            },
            {
              "name": "[portals-pluto-dev] 20210714 [jira] [Created] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254",
              "refsource": "MLIST",
              "tags": [],
              "url": "https://lists.apache.org/thread.html/r6c93d8ade3788dbc00f5a37238bc278e7d859f2446b885460783a16f@%3Cpluto-dev.portals.apache.org%3E"
            },
            {
              "name": "N/A",
              "refsource": "N/A",
              "tags": [],
              "url": "https://www.oracle.com//security-alerts/cpujul2021.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2021-07-20T23:15Z",
      "publishedDate": "2015-03-09T14:59Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "jakarta-taglibs-standard-1.1.1-257.4 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the jakarta-taglibs-standard-1.1.1-257.4 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-10219",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10219-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-0254 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-0254/"
      }
    ],
    "title": "jakarta-taglibs-standard-1.1.1-257.4 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:10219-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-1.1.1-257.4.aarch64",
                "product": {
                  "name": "jakarta-taglibs-standard-1.1.1-257.4.aarch64",
                  "product_id": "jakarta-taglibs-standard-1.1.1-257.4.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64",
                  "product_id": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-1.1.1-257.4.ppc64le",
                "product": {
                  "name": "jakarta-taglibs-standard-1.1.1-257.4.ppc64le",
                  "product_id": "jakarta-taglibs-standard-1.1.1-257.4.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le",
                  "product_id": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-1.1.1-257.4.s390x",
                "product": {
                  "name": "jakarta-taglibs-standard-1.1.1-257.4.s390x",
                  "product_id": "jakarta-taglibs-standard-1.1.1-257.4.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x",
                  "product_id": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-1.1.1-257.4.x86_64",
                "product": {
                  "name": "jakarta-taglibs-standard-1.1.1-257.4.x86_64",
                  "product_id": "jakarta-taglibs-standard-1.1.1-257.4.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64",
                  "product_id": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-1.1.1-257.4.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.aarch64"
        },
        "product_reference": "jakarta-taglibs-standard-1.1.1-257.4.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-1.1.1-257.4.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.ppc64le"
        },
        "product_reference": "jakarta-taglibs-standard-1.1.1-257.4.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-1.1.1-257.4.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.s390x"
        },
        "product_reference": "jakarta-taglibs-standard-1.1.1-257.4.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-1.1.1-257.4.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.x86_64"
        },
        "product_reference": "jakarta-taglibs-standard-1.1.1-257.4.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-0254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-0254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.aarch64",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.ppc64le",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.s390x",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.x86_64",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x",
          "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-0254",
          "url": "https://www.suse.com/security/cve/CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 920813 for CVE-2015-0254",
          "url": "https://bugzilla.suse.com/920813"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.aarch64",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.ppc64le",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.s390x",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-1.1.1-257.4.x86_64",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.aarch64",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.ppc64le",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.s390x",
            "openSUSE Tumbleweed:jakarta-taglibs-standard-javadoc-1.1.1-257.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-0254"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated jakarta-taglibs-standard packages that fix one security issue are\nnow available for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "jakarta-taglibs-standard is the Java Standard Tag Library (JSTL).\nThis library is used in conjunction with Tomcat and Java Server Pages\n(JSP).\n\nIt was found that the Java Standard Tag Library (JSTL) allowed the\nprocessing of untrusted XML documents to utilize external entity\nreferences, which could access resources on the host system and,\npotentially, allowing arbitrary code execution. (CVE-2015-0254)\n\nNote: jakarta-taglibs-standard users may need to take additional steps\nafter applying this update. Detailed instructions on the additional steps\ncan be found here:\n\nhttps://access.redhat.com/solutions/1584363\n\nAll jakarta-taglibs-standard users are advised to upgrade to these updated\npackages, which contain a backported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1695",
        "url": "https://access.redhat.com/errata/RHSA-2015:1695"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/solutions/1584363",
        "url": "https://access.redhat.com/solutions/1584363"
      },
      {
        "category": "external",
        "summary": "1198606",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1695.json"
      }
    ],
    "title": "Red Hat Security Advisory: jakarta-taglibs-standard security update",
    "tracking": {
      "current_release_date": "2026-01-28T22:58:36+00:00",
      "generator": {
        "date": "2026-01-28T22:58:36+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.16"
        }
      },
      "id": "RHSA-2015:1695",
      "initial_release_date": "2015-08-31T09:04:49+00:00",
      "revision_history": [
        {
          "date": "2015-08-31T09:04:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-08-31T09:04:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-28T22:58:36+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-LE-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-LE-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                  "product_id": "7Client-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                  "product_id": "7ComputeNode-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                  "product_id": "7Workstation-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.2-14.ael7b_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.ael7b_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.2-14.el7_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.el7_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.1-11.7.el6_7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.1-11.7.el6_7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.ael7b_1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.el7_1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.1-11.7.el6_7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Apache Software Foundation"
          ]
        },
        {
          "names": [
            "David Jorm"
          ],
          "organization": "IIX"
        }
      ],
      "cve": "CVE-2015-0254",
      "discovery_date": "2015-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1198606"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the Java Standard Tag Library (JSTL) allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Users of EAP 6.x and 7.0 should upgrade to at least 6.4.9 and pass the following system property on startup to prevent XXE attacks in JSTL:\norg.apache.taglibs.standard.xml.accessExternalEntity=false\n\nFor more details please see refer to this KCS solution:\nhttps://access.redhat.com/solutions/1584363",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "RHBZ#1198606",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0254",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254"
        }
      ],
      "release_date": "2015-02-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-08-31T09:04:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1695"
        },
        {
          "category": "workaround",
          "details": "Users should upgrade to Apache Standard Taglibs 1.2.3 or later.\n\nThis version uses JAXP\u2019s FEATURE_SECURE_PROCESSING to restrict XML processing. Depending on the Java runtime version in use, additional configuration may be required:\n\nJava8:\nExternal entity access is automatically disabled if a SecurityManager is active.\n\nJava7:\nJAXP properties may need to be used to disable external access. See http://docs.oracle.com/javase/tutorial/jaxp/properties/properties.html\n\nJava6 and earlier:\nA new system property org.apache.taglibs.standard.xml.accessExternalEntity may be used to specify the protocols that can be used to access external entities. This defaults to \"all\" if no SecurityManager is present and to \"\" (thereby disabling access) if a SecurityManager is detected.",
          "product_ids": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated jakarta-taglibs-standard packages that fix one security issue are\nnow available for Red Hat Enterprise Linux 6 and 7.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "jakarta-taglibs-standard is the Java Standard Tag Library (JSTL).\nThis library is used in conjunction with Tomcat and Java Server Pages\n(JSP).\n\nIt was found that the Java Standard Tag Library (JSTL) allowed the\nprocessing of untrusted XML documents to utilize external entity\nreferences, which could access resources on the host system and,\npotentially, allowing arbitrary code execution. (CVE-2015-0254)\n\nNote: jakarta-taglibs-standard users may need to take additional steps\nafter applying this update. Detailed instructions on the additional steps\ncan be found here:\n\nhttps://access.redhat.com/solutions/1584363\n\nAll jakarta-taglibs-standard users are advised to upgrade to these updated\npackages, which contain a backported patch to correct this issue.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1695",
        "url": "https://access.redhat.com/errata/RHSA-2015:1695"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/solutions/1584363",
        "url": "https://access.redhat.com/solutions/1584363"
      },
      {
        "category": "external",
        "summary": "1198606",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1695.json"
      }
    ],
    "title": "Red Hat Security Advisory: jakarta-taglibs-standard security update",
    "tracking": {
      "current_release_date": "2024-12-15T18:43:11+00:00",
      "generator": {
        "date": "2024-12-15T18:43:11+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.3"
        }
      },
      "id": "RHSA-2015:1695",
      "initial_release_date": "2015-08-31T09:04:49+00:00",
      "revision_history": [
        {
          "date": "2015-08-31T09:04:49+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-08-31T09:04:49+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-15T18:43:11+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-LE-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-LE-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client Optional (v. 7)",
                  "product_id": "7Client-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
                  "product_id": "7ComputeNode-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 7)",
                  "product_id": "7Server-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
                  "product_id": "7Workstation-optional-7.1.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.7.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.2-14.ael7b_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.ael7b_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.2-14.el7_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.el7_1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                  "product_id": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard-javadoc@1.1.1-11.7.el6_7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                  "product_id": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.1-11.7.el6_7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.ael7b_1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.2-14.el7_1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                "product": {
                  "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                  "product_id": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jakarta-taglibs-standard@1.1.1-11.7.el6_7?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Client-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6ComputeNode-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Server-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
        "relates_to_product_reference": "6Workstation-optional-6.7.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
          "product_id": "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Client-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
          "product_id": "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7ComputeNode-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
          "product_id": "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Server-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
        "relates_to_product_reference": "7Server-optional-LE-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src"
        },
        "product_reference": "jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
          "product_id": "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        },
        "product_reference": "jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
        "relates_to_product_reference": "7Workstation-optional-7.1.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Apache Software Foundation"
          ]
        },
        {
          "names": [
            "David Jorm"
          ],
          "organization": "IIX"
        }
      ],
      "cve": "CVE-2015-0254",
      "discovery_date": "2015-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1198606"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the Java Standard Tag Library (JSTL) allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Users of EAP 6.x and 7.0 should upgrade to at least 6.4.9 and pass the following system property on startup to prevent XXE attacks in JSTL:\norg.apache.taglibs.standard.xml.accessExternalEntity=false\n\nFor more details please see refer to this KCS solution:\nhttps://access.redhat.com/solutions/1584363",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
          "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
          "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
          "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
          "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "RHBZ#1198606",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0254",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254"
        }
      ],
      "release_date": "2015-02-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-08-31T09:04:49+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1695"
        },
        {
          "category": "workaround",
          "details": "Users should upgrade to Apache Standard Taglibs 1.2.3 or later.\n\nThis version uses JAXP\u2019s FEATURE_SECURE_PROCESSING to restrict XML processing. Depending on the Java runtime version in use, additional configuration may be required:\n\nJava8:\nExternal entity access is automatically disabled if a SecurityManager is active.\n\nJava7:\nJAXP properties may need to be used to disable external access. See http://docs.oracle.com/javase/tutorial/jaxp/properties/properties.html\n\nJava6 and earlier:\nA new system property org.apache.taglibs.standard.xml.accessExternalEntity may be used to specify the protocols that can be used to access external entities. This defaults to \"all\" if no SecurityManager is present and to \"\" (thereby disabling access) if a SecurityManager is detected.",
          "product_ids": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.0"
          },
          "products": [
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Client-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6ComputeNode-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Server-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.noarch",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-0:1.1.1-11.7.el6_7.src",
            "6Workstation-optional-6.7.z:jakarta-taglibs-standard-javadoc-0:1.1.1-11.7.el6_7.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Client-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7ComputeNode-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Server-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.noarch",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.ael7b_1.src",
            "7Server-optional-LE-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.ael7b_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.noarch",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-0:1.1.2-14.el7_1.src",
            "7Workstation-optional-7.1.Z:jakarta-taglibs-standard-javadoc-0:1.1.2-14.el7_1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated packages that provide Red Hat JBoss Enterprise Application Platform\n6.4.6, fix several bugs, add various enhancements, and resolve one security\nissue are now available for Red Hat Enterprise Linux 5.\n\nRed Hat Product Security has rated this update as having Important security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 6 is a platform for Java\napplications based on JBoss Application Server 7.\n\nThe following security issue is addressed with this release:\n\nIt was found that the Java Standard Tag Library (JSTL) allowed the\nprocessing of untrusted XML documents to utilize external entity\nreferences, which could access resources on the host system and,\npotentially, allowing arbitrary code execution. (CVE-2015-0254)\n\nNote: Tag Library users may need to take additional steps after applying\nthis update. Detailed instructions on the additional steps can be found\nhere:\nhttps://access.redhat.com/solutions/1584363\n\nRed Hat would like to thank David Jorm of IIX, and the Apache Software\nFoundation for reporting the CVE-2015-0254 flaw.\n\nThis release serves as a replacement for Red Hat JBoss Enterprise\nApplication Platform 6.4.5, and includes bug fixes and enhancements.\nDocumentation for these changes will be available shortly from the Red Hat\nJBoss Enterprise Application Platform 6.4.6 Release Notes, linked to in the\nReferences.\n\nAll users of Red Hat JBoss Enterprise Application Platform 6.4 on Red Hat\nEnterprise Linux 5 are advised to upgrade to these updated packages. The\nJBoss server process must be restarted for the update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2016:0121",
        "url": "https://access.redhat.com/errata/RHSA-2016:0121"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html",
        "url": "https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/solutions/1584363",
        "url": "https://access.redhat.com/solutions/1584363"
      },
      {
        "category": "external",
        "summary": "1198606",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
      },
      {
        "category": "external",
        "summary": "1275693",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1275693"
      },
      {
        "category": "external",
        "summary": "1286739",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1286739"
      },
      {
        "category": "external",
        "summary": "1286837",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1286837"
      },
      {
        "category": "external",
        "summary": "1289296",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289296"
      },
      {
        "category": "external",
        "summary": "1289299",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289299"
      },
      {
        "category": "external",
        "summary": "1289305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289305"
      },
      {
        "category": "external",
        "summary": "1289625",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289625"
      },
      {
        "category": "external",
        "summary": "1289749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1289749"
      },
      {
        "category": "external",
        "summary": "1290034",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290034"
      },
      {
        "category": "external",
        "summary": "1290060",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290060"
      },
      {
        "category": "external",
        "summary": "1290813",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290813"
      },
      {
        "category": "external",
        "summary": "1290818",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290818"
      },
      {
        "category": "external",
        "summary": "1298277",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1298277"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0121.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 5",
    "tracking": {
      "current_release_date": "2026-01-28T22:58:39+00:00",
      "generator": {
        "date": "2026-01-28T22:58:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.16"
        }
      },
      "id": "RHSA-2016:0121",
      "initial_release_date": "2016-02-04T21:42:41+00:00",
      "revision_history": [
        {
          "date": "2016-02-04T21:42:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2016-02-04T21:42:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-28T22:58:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
                  "product_id": "5Server-JBEAP-6.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6::el5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-remote-naming@1.0.12-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-entitymanager-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-envers-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-core-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-infinispan-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.7-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
                  "product_id": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-security@1.5.8-1.redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
                  "product_id": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wss4j@1.6.19-3.redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
                  "product_id": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-cxf@2.7.18-1.redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-common-api-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-common-spi-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-core-api-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-core-impl-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-common-impl-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-jdbc-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-deployers-common-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-spec-api-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-validator-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jgroups@3.2.15-1.Final_redhat_1.1.ep6.el5?arch=noarch\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.6-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
                "product": {
                  "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
                  "product_id": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-validator@4.3.2-3.Final_redhat_3.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpserver@1.0.6-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan-core@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan-cachestore-remote@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan-client-hotrod@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan-cachestore-jdbc@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_id": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-jstl-api_1.2_spec@1.0.9-1.Final_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
                "product": {
                  "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
                  "product_id": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hornetq@2.3.25-10.SP8_redhat_1.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-javadocs@7.5.6-2.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-client-all@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-version@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jdr@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-messaging@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-sar@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-protocol@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-clustering@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-web@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jmx@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jpa@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-logging@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-transactions@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-weld@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-connector@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jsf@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-xts@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-threads@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-cli@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-security@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-remoting@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-embedded@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-server@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-appclient@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-network@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-cmp@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-mail@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-naming@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-webservices@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-pojo@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-core-security@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ee@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-core@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-standalone@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-product-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-appclient@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-domain@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-bundles@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                "product": {
                  "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_id": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-remote-naming@1.0.12-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-eap6@4.2.22-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-remoting3@3.3.7-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src",
                  "product_id": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/xml-security@1.5.8-1.redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
                  "product_id": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/wss4j@1.6.19-3.redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
                  "product_id": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/apache-cxf@2.7.18-1.redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/ironjacamar-eap6@1.0.35-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jgroups@3.2.15-1.Final_redhat_1.1.ep6.el5?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossws-cxf@4.3.6-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
                "product": {
                  "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
                  "product_id": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hibernate4-validator@4.3.2-3.Final_redhat_3.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpserver@1.0.6-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/infinispan@5.2.17-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
                  "product_id": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-jstl-api_1.2_spec@1.0.9-1.Final_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
                "product": {
                  "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
                  "product_id": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/hornetq@2.3.25-10.SP8_redhat_1.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-javadocs@7.5.6-2.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-client-all@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-version@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jdr@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-messaging@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-domain-management@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-platform-mbean@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-sar@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-protocol@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jsr77@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-deployment-repository@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-clustering@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-web@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jmx@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jacorb@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jpa@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-logging@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-transactions@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jaxr@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-weld@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-domain-http@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-connector@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ejb3@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jsf@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-xts@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-host-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-process-controller@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ee-deployment@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-controller-client@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-threads@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-cli@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-security@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi-service@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-jaxrs@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-remoting@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-embedded@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-server@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-appclient@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-system-jmx@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-network@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-configadmin@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-cmp@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-management-client-content@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-mail@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-picketlink@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-modcluster@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-naming@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-webservices@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-pojo@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-osgi@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-core-security@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jboss-as-ee@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-core@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-standalone@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-product-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-appclient@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-domain@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-bundles@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                "product": {
                  "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_id": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbossas-modules-eap@7.5.6-1.Final_redhat_2.1.ep6.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src"
        },
        "product_reference": "apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch"
        },
        "product_reference": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src"
        },
        "product_reference": "hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src"
        },
        "product_reference": "jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src"
        },
        "product_reference": "jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch"
        },
        "product_reference": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src"
        },
        "product_reference": "wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch"
        },
        "product_reference": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src as a component of Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server",
          "product_id": "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src"
        },
        "product_reference": "xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src",
        "relates_to_product_reference": "5Server-JBEAP-6.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Apache Software Foundation"
          ]
        },
        {
          "names": [
            "David Jorm"
          ],
          "organization": "IIX"
        }
      ],
      "cve": "CVE-2015-0254",
      "discovery_date": "2015-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1198606"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the Java Standard Tag Library (JSTL) allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Users of EAP 6.x and 7.0 should upgrade to at least 6.4.9 and pass the following system property on startup to prevent XXE attacks in JSTL:\norg.apache.taglibs.standard.xml.accessExternalEntity=false\n\nFor more details please see refer to this KCS solution:\nhttps://access.redhat.com/solutions/1584363",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
          "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
          "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
          "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
          "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "RHBZ#1198606",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1198606"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-0254",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-0254"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-0254"
        }
      ],
      "release_date": "2015-02-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2016-02-04T21:42:41+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
          "product_ids": [
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2016:0121"
        },
        {
          "category": "workaround",
          "details": "Users should upgrade to Apache Standard Taglibs 1.2.3 or later.\n\nThis version uses JAXP\u2019s FEATURE_SECURE_PROCESSING to restrict XML processing. Depending on the Java runtime version in use, additional configuration may be required:\n\nJava8:\nExternal entity access is automatically disabled if a SecurityManager is active.\n\nJava7:\nJAXP properties may need to be used to disable external access. See http://docs.oracle.com/javase/tutorial/jaxp/properties/properties.html\n\nJava6 and earlier:\nA new system property org.apache.taglibs.standard.xml.accessExternalEntity may be used to specify the protocols that can be used to access external entities. This defaults to \"all\" if no SecurityManager is present and to \"\" (thereby disabling access) if a SecurityManager is detected.",
          "product_ids": [
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L",
            "version": "3.0"
          },
          "products": [
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:apache-cxf-0:2.7.18-1.redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-core-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hibernate4-entitymanager-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-envers-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-infinispan-eap6-0:4.2.22-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hibernate4-validator-0:4.3.2-3.Final_redhat_3.1.ep6.el5.src",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:hornetq-0:2.3.25-10.SP8_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:httpserver-0:1.0.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-0:5.2.17-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:infinispan-cachestore-jdbc-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-cachestore-remote-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-client-hotrod-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:infinispan-core-0:5.2.17-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-common-spi-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-core-impl-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-deployers-common-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:ironjacamar-jdbc-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-spec-api-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:ironjacamar-validator-eap6-0:1.0.35-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cli-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-client-all-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-clustering-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-cmp-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-connector-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-controller-client-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-core-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-repository-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-deployment-scanner-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-http-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-domain-management-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ee-deployment-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-ejb3-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-embedded-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-host-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jacorb-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jaxrs-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jdr-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jpa-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsf-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-jsr77-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-logging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-mail-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-management-client-content-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-messaging-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-modcluster-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-naming-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-network-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-configadmin-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-osgi-service-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-picketlink-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-platform-mbean-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-pojo-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-process-controller-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-protocol-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-remoting-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-sar-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-security-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-server-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-system-jmx-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-threads-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-transactions-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-version-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-web-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-webservices-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-weld-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-as-xts-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-jstl-api_1.2_spec-0:1.0.9-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remote-naming-0:1.0.12-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jboss-remoting3-0:3.3.7-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-appclient-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-bundles-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-core-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-domain-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-javadocs-0:7.5.6-2.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-modules-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-product-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-standalone-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossas-welcome-content-eap-0:7.5.6-1.Final_redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jbossws-cxf-0:4.3.6-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:jgroups-1:3.2.15-1.Final_redhat_1.1.ep6.el5.src",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:wss4j-0:1.6.19-3.redhat_2.1.ep6.el5.src",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.noarch",
            "5Server-JBEAP-6.4:xml-security-0:1.5.8-1.redhat_1.1.ep6.el5.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags"
    }
  ]
}