{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Sterling Connect:Express pour UNIX versions 1.5.x ant\u00e9rieures \u00e0 1.5.0.17010",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "QRadar Assistant versions ant\u00e9rieures \u00e0 3.8.1",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Analytics Mobile (Android) versions 1.1.x ant\u00e9rieures \u00e0 1.1.20",
      "product": {
        "name": "Cognos Analytics",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling External Authentication Server versions 6.0.x ant\u00e9rieures \u00e0 6.0.3.1 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "SOAR QRadar Plugin App versions ant\u00e9rieures \u00e0 5.5.0",
      "product": {
        "name": "QRadar",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Analytics versions 12.0.x ant\u00e9rieures \u00e0 12.0.4 ",
      "product": {
        "name": "Cognos Analytics",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.1.x ant\u00e9rieures \u00e0 6.1.0.1 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Analytics versions 11.2.x ant\u00e9rieures \u00e0 11.2.4 FP4",
      "product": {
        "name": "Cognos Analytics",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling External Authentication Server versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.2 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Cognos Analytics Mobile (iOS) versions 1.1.x ant\u00e9rieures \u00e0 1.1.20",
      "product": {
        "name": "Cognos Analytics",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    },
    {
      "description": "Sterling Secure Proxy versions 6.0.x ant\u00e9rieures \u00e0 6.0.3.1 GA",
      "product": {
        "name": "Sterling",
        "vendor": {
          "name": "IBM",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2022-0144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0144"
    },
    {
      "name": "CVE-2021-44906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-44906"
    },
    {
      "name": "CVE-2024-37891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37891"
    },
    {
      "name": "CVE-2023-38264",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38264"
    },
    {
      "name": "CVE-2024-22201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22201"
    },
    {
      "name": "CVE-2022-46175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46175"
    },
    {
      "name": "CVE-2024-21144",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21144"
    },
    {
      "name": "CVE-2023-25166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25166"
    },
    {
      "name": "CVE-2024-4068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4068"
    },
    {
      "name": "CVE-2023-46234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46234"
    },
    {
      "name": "CVE-2023-28856",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-28856"
    },
    {
      "name": "CVE-2021-28169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-28169"
    },
    {
      "name": "CVE-2018-12538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12538"
    },
    {
      "name": "CVE-2024-35176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35176"
    },
    {
      "name": "CVE-2024-21890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21890"
    },
    {
      "name": "CVE-2024-21896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21896"
    },
    {
      "name": "CVE-2023-50312",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-50312"
    },
    {
      "name": "CVE-2024-3933",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3933"
    },
    {
      "name": "CVE-2022-25883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25883"
    },
    {
      "name": "CVE-2024-22025",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22025"
    },
    {
      "name": "CVE-2023-38737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38737"
    },
    {
      "name": "CVE-2024-29415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-29415"
    },
    {
      "name": "CVE-2022-36943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36943"
    },
    {
      "name": "CVE-2024-43398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-43398"
    },
    {
      "name": "CVE-2023-44487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"
    },
    {
      "name": "CVE-2023-38009",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-38009"
    },
    {
      "name": "CVE-2023-45133",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45133"
    },
    {
      "name": "CVE-2023-26049",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26049"
    },
    {
      "name": "CVE-2023-46809",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-46809"
    },
    {
      "name": "CVE-2020-27216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27216"
    },
    {
      "name": "CVE-2019-13224",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-13224"
    },
    {
      "name": "CVE-2022-29622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29622"
    },
    {
      "name": "CVE-2021-40690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-40690"
    },
    {
      "name": "CVE-2024-4067",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-4067"
    },
    {
      "name": "CVE-2024-30172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-30172"
    },
    {
      "name": "CVE-2021-43138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43138"
    },
    {
      "name": "CVE-2023-45145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-45145"
    },
    {
      "name": "CVE-2024-22019",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22019"
    },
    {
      "name": "CVE-2023-0842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-0842"
    },
    {
      "name": "CVE-2023-22467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-22467"
    },
    {
      "name": "CVE-2024-21011",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21011"
    },
    {
      "name": "CVE-2024-22329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22329"
    },
    {
      "name": "CVE-2024-45296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-45296"
    },
    {
      "name": "CVE-2024-21892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21892"
    },
    {
      "name": "CVE-2024-21147",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21147"
    },
    {
      "name": "CVE-2022-43383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-43383"
    },
    {
      "name": "CVE-2019-16163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-16163"
    },
    {
      "name": "CVE-2024-39908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39908"
    },
    {
      "name": "CVE-2022-3517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3517"
    },
    {
      "name": "CVE-2024-35195",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-35195"
    },
    {
      "name": "CVE-2024-41946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41946"
    },
    {
      "name": "CVE-2024-21140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21140"
    },
    {
      "name": "CVE-2024-21094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21094"
    },
    {
      "name": "CVE-2023-51775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-51775"
    },
    {
      "name": "CVE-2018-12545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12545"
    },
    {
      "name": "CVE-2024-5569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-5569"
    },
    {
      "name": "CVE-2023-52428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-52428"
    },
    {
      "name": "CVE-2024-41784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41784"
    },
    {
      "name": "CVE-2021-3803",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3803"
    },
    {
      "name": "CVE-2023-40167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-40167"
    },
    {
      "name": "CVE-2023-41900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-41900"
    },
    {
      "name": "CVE-2024-21138",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21138"
    },
    {
      "name": "CVE-2022-24834",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24834"
    },
    {
      "name": "CVE-2023-36479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-36479"
    },
    {
      "name": "CVE-2024-6119",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6119"
    },
    {
      "name": "CVE-2024-37890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-37890"
    },
    {
      "name": "CVE-2023-44483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-44483"
    },
    {
      "name": "CVE-2024-27270",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27270"
    },
    {
      "name": "CVE-2024-21145",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21145"
    },
    {
      "name": "CVE-2024-21891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21891"
    },
    {
      "name": "CVE-2022-38900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38900"
    },
    {
      "name": "CVE-2024-22017",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-22017"
    },
    {
      "name": "CVE-2022-0235",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-0235"
    },
    {
      "name": "CVE-2019-10241",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-10241"
    },
    {
      "name": "CVE-2022-24736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24736"
    },
    {
      "name": "CVE-2024-25042",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-25042"
    },
    {
      "name": "CVE-2024-34064",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-34064"
    },
    {
      "name": "CVE-2020-15168",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-15168"
    },
    {
      "name": "CVE-2023-29262",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-29262"
    },
    {
      "name": "CVE-2023-26048",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26048"
    },
    {
      "name": "CVE-2024-21085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21085"
    },
    {
      "name": "CVE-2023-42282",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-42282"
    },
    {
      "name": "CVE-2022-24735",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24735"
    },
    {
      "name": "CVE-2024-21131",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-21131"
    },
    {
      "name": "CVE-2024-39689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-39689"
    },
    {
      "name": "CVE-2024-41123",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-41123"
    },
    {
      "name": "CVE-2019-19012",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-19012"
    },
    {
      "name": "CVE-2024-27267",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-27267"
    },
    {
      "name": "CVE-2012-2677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2677"
    },
    {
      "name": "CVE-2024-6345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-6345"
    },
    {
      "name": "CVE-2021-34428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-34428"
    }
  ],
  "links": [],
  "reference": "CERTFR-2024-AVI-0923",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-10-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    },
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
  "vendor_advisories": [
    {
      "published_at": "2024-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7173631",
      "url": "https://www.ibm.com/support/pages/node/7173631"
    },
    {
      "published_at": "2024-10-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7174016",
      "url": "https://www.ibm.com/support/pages/node/7174016"
    },
    {
      "published_at": "2024-10-24",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7174015",
      "url": "https://www.ibm.com/support/pages/node/7174015"
    },
    {
      "published_at": "2024-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7173632",
      "url": "https://www.ibm.com/support/pages/node/7173632"
    },
    {
      "published_at": "2024-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7172691",
      "url": "https://www.ibm.com/support/pages/node/7172691"
    },
    {
      "published_at": "2024-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7172692",
      "url": "https://www.ibm.com/support/pages/node/7172692"
    },
    {
      "published_at": "2024-10-21",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7173592",
      "url": "https://www.ibm.com/support/pages/node/7173592"
    },
    {
      "published_at": "2024-10-23",
      "title": "Bulletin de s\u00e9curit\u00e9 IBM 7173866",
      "url": "https://www.ibm.com/support/pages/node/7173866"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB706AA4-B7E9-4319-A2C0-65B7186507DB",
              "versionEndExcluding": "2.1.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:santuario_xml_security_for_java:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "20BABD5C-5813-48B8-BAC9-0F36F381F12A",
              "versionEndExcluding": "2.2.3",
              "versionStartIncluding": "2.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:cxf:3.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B927066-A747-4AC3-9E90-BCDB2E0175E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:tomee:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD205DB8-3CCE-47AE-AD88-A557D31E4B23",
              "versionEndExcluding": "8.0.8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A3622F5-5976-4BBC-A147-FC8A6431EA79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CDE72F7-ED9D-4A53-BF63-DF6711FFDEF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5B4A191-44AE-4C35-9164-19237D2CF013",
              "versionEndIncluding": "8.1.0",
              "versionStartIncluding": "8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A543B4F8-149A-48AB-B388-AB7FA2ECAC18",
              "versionEndIncluding": "8.2.3",
              "versionStartIncluding": "8.2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1214FDF-357A-4BB9-BADE-50FB2BD16D10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B74B912-152D-4F38-9FC1-741D6D0B27FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "3198F822-43F8-4CB3-97F7-C2982FDA5CBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8AF00C6-B97F-414D-A8DF-057E6BFD8597",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "3486C85C-57BC-433F-941C-E81539DA5C1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "798E4FEE-9B2B-436E-A2B3-B8AA1079892A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB86F6C3-981E-4ECA-A5EB-9A9CD73D70C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B042849-7EF5-4A5F-B6CD-712C0B8735BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7435071D-0C95-4686-A978-AFC4C9A0D0FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CFCE558-9972-46A2-8539-C16044F1BAA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1194C4E-CF42-4B4D-BA9A-40FDD28F1D58",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "822A3C37-86F2-4E91-BE91-2A859F983941",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD311C33-A309-44D5-BBFB-539D72C7F8C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8383028-B719-41FD-9B6A-71F8EB4C5F8D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE1BC44A-F0AF-41CD-9CEB-B07AB5ADAB38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E702EBED-DB39-4084-84B1-258BC5FE7545",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F7956BF-D5B6-484B-999C-36B45CD8B75B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEE71EA5-B315-4F1E-BFEE-EC426B562F7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9DA6B655-A445-42E5-B6D9-70AB1C04774A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04BCDC24-4A21-473C-8733-0D9CFB38A752",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element."
    },
    {
      "lang": "es",
      "value": "Todas las versiones de Apache Santuario - XML Security for Java anteriores a 2.2.3 y 2.1.7 son vulnerables a un problema donde la propiedad \"secureValidation\" no es pasada correctamente cuando es creado un KeyInfo a partir de un elemento KeyInfoReference. Esto permite a un atacante abusar de una transformaci\u00f3n XPath para extraer cualquier archivo local .xml en un elemento RetrievalMethod"
    }
  ],
  "id": "CVE-2021-40690",
  "lastModified": "2024-11-21T06:24:34.267",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-19T18:15:07.223",
  "references": [
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59%40%3Cissues.cxf.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8%40%3Cuser.poi.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "url": "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html"
    },
    {
      "source": "security@apache.org",
      "url": "https://security.netapp.com/advisory/ntap-20230818-0002/"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-5010"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59%40%3Cissues.cxf.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Mailing List",
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8%40%3Cuser.poi.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8%40%3Ccommits.tomee.apache.org%3E"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.netapp.com/advisory/ntap-20230818-0002/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2021/dsa-5010"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
    }
  ],
  "sourceIdentifier": "security@apache.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "security@apache.org",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Secondary"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.apache.santuario:xmlsec"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.2.0"
            },
            {
              "fixed": "2.2.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Maven",
        "name": "org.apache.santuario:xmlsec"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2021-40690"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2021-09-20T20:24:35Z",
    "nvd_published_at": "2021-09-19T18:15:00Z",
    "severity": "HIGH"
  },
  "details": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
  "id": "GHSA-j8wc-gxx9-82hx",
  "modified": "2021-10-04T14:16:41Z",
  "published": "2021-09-20T23:18:41Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20230818-0002"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2021/dsa-5010"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Exposure of Sensitive Information to an Unauthorized Actor in Apache Santuario"
}

{
  "GSD": {
    "alias": "CVE-2021-40690",
    "description": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
    "id": "GSD-2021-40690",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-40690.html",
      "https://www.debian.org/security/2021/dsa-5010",
      "https://access.redhat.com/errata/RHSA-2022:0501",
      "https://access.redhat.com/errata/RHSA-2022:0164",
      "https://access.redhat.com/errata/RHSA-2022:0155",
      "https://access.redhat.com/errata/RHSA-2022:0152",
      "https://access.redhat.com/errata/RHSA-2022:0151",
      "https://access.redhat.com/errata/RHSA-2022:0146",
      "https://access.redhat.com/errata/RHSA-2021:5170",
      "https://access.redhat.com/errata/RHSA-2021:5154",
      "https://access.redhat.com/errata/RHSA-2021:5151",
      "https://access.redhat.com/errata/RHSA-2021:5150",
      "https://access.redhat.com/errata/RHSA-2021:5149",
      "https://access.redhat.com/errata/RHSA-2022:1013",
      "https://access.redhat.com/errata/RHSA-2022:5532",
      "https://ubuntu.com/security/CVE-2021-40690",
      "https://access.redhat.com/errata/RHSA-2021:4679",
      "https://access.redhat.com/errata/RHSA-2022:6407"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-40690"
      ],
      "details": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
      "id": "GSD-2021-40690",
      "modified": "2023-12-13T01:23:25.859121Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@apache.org",
        "ID": "CVE-2021-40690",
        "STATE": "PUBLIC",
        "TITLE": "Bypass of the secureValidation property"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Apache Santuario",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "XML Security for Java",
                          "version_value": "2.2.3,2.1.7"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apache Software Foundation"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "An Trinh, Calif."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "impact": [
        {}
      ],
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E",
            "refsource": "MISC",
            "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20210922 [tomee] 02/02: Update xmlsec to 2.2.3 to mitigate CVE-2021-40690",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20210923 [jira] [Resolved] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20210923 [jira] [Created] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20210923 [jira] [Assigned] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20210923 [jira] [Updated] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "[poi-user] 20210923 Re: CVE-2021-40690 on xmlsec jar",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E"
          },
          {
            "name": "[debian-lts-announce] 20210927 [SECURITY] [DLA 2767-1] libxml-security-java security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html"
          },
          {
            "name": "[cxf-issues] 20211027 [jira] [Created] (CXF-8613) High Security issues reported with Apache Santuario library bundled in CXF 3.4.4",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E"
          },
          {
            "name": "[tomee-commits] 20211028 [jira] [Updated] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E"
          },
          {
            "name": "DSA-5010",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2021/dsa-5010"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujul2022.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20230818-0002/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20230818-0002/"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[3.4.4]",
          "affected_versions": "Version 3.4.4",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-200",
            "CWE-937"
          ],
          "date": "2023-08-18",
          "description": "Apache Santuario - XML Security for Java is vulnerable to an issue where the `secureValidation` property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "fixed_versions": [
            "3.4.5"
          ],
          "identifier": "CVE-2021-40690",
          "identifiers": [
            "CVE-2021-40690"
          ],
          "not_impacted": "All versions before 3.4.4, all versions after 3.4.4",
          "package_slug": "maven/org.apache.cxf/cxf",
          "pubdate": "2021-09-19",
          "solution": "Upgrade to version 3.4.5 or above.",
          "title": "Exposure of Sensitive Information to an Unauthorized Actor",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-40690",
            "https://issues.apache.org/jira/browse/CXF-8613",
            "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E",
            "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E",
            "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E",
            "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E",
            "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E",
            "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E",
            "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E",
            "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html",
            "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E",
            "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E",
            "https://www.debian.org/security/2021/dsa-5010"
          ],
          "uuid": "5bc587b1-3cce-44d3-ab10-6b72f9c22497"
        },
        {
          "affected_range": "(,2.1.7),[2.2.0,2.2.3)",
          "affected_versions": "All versions before 2.1.7, all versions starting from 2.2.0 before 2.2.3",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-200",
            "CWE-937"
          ],
          "date": "2023-08-18",
          "description": "Apache Santuario - XML Security for Java is vulnerable to an issue where the `secureValidation` property is not passed correctly when creating a `KeyInfo` from a `KeyInfoReference` element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a `RetrievalMethod` element.",
          "fixed_versions": [
            "2.1.7",
            "2.2.3"
          ],
          "identifier": "CVE-2021-40690",
          "identifiers": [
            "CVE-2021-40690"
          ],
          "not_impacted": "All versions starting from 2.1.7 before 2.2.0, all versions starting from 2.2.3",
          "package_slug": "maven/org.apache.santuario/xmlsec",
          "pubdate": "2021-09-19",
          "solution": "Upgrade to versions 2.1.7, 2.2.3 or above.",
          "title": "Exposure of Sensitive Information to an Unauthorized Actor",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
          ],
          "uuid": "2304b624-0d1a-429d-b2de-ab16b2e9e356"
        },
        {
          "affected_range": "(,8.0.8)",
          "affected_versions": "All versions before 8.0.8",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-200",
            "CWE-937"
          ],
          "date": "2023-08-18",
          "description": "All versions of Apache Santuario - XML Security for Java is vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "fixed_versions": [
            "8.0.8"
          ],
          "identifier": "CVE-2021-40690",
          "identifiers": [
            "CVE-2021-40690"
          ],
          "not_impacted": "All versions starting from 8.0.8",
          "package_slug": "maven/org.apache.tomee/openejb-lite",
          "pubdate": "2021-09-19",
          "solution": "Upgrade to version 8.0.8 or above.",
          "title": "Exposure of Sensitive Information to an Unauthorized Actor",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
          ],
          "uuid": "df83d941-4d47-41e0-a154-59bfe3bd9e0d"
        },
        {
          "affected_range": "(,8.0.8)",
          "affected_versions": "All versions before 8.0.8",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-200",
            "CWE-937"
          ],
          "date": "2023-08-18",
          "description": "All versions of Apache Santuario - XML Security for Java is vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "fixed_versions": [
            "8.0.8"
          ],
          "identifier": "CVE-2021-40690",
          "identifiers": [
            "CVE-2021-40690"
          ],
          "not_impacted": "All versions starting from 8.0.8",
          "package_slug": "maven/org.apache.tomee/tomee-webapp",
          "pubdate": "2021-09-19",
          "solution": "Upgrade to version 8.0.8 or above.",
          "title": "Exposure of Sensitive Information to an Unauthorized Actor",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
          ],
          "uuid": "f9b6c0f1-d35e-4373-94d8-8d4c0914c9cd"
        },
        {
          "affected_range": "(,8.0.8)",
          "affected_versions": "All versions before 8.0.8",
          "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "cwe_ids": [
            "CWE-1035",
            "CWE-200",
            "CWE-937"
          ],
          "date": "2023-08-18",
          "description": "All versions of Apache Santuario - XML Security for Java is vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "fixed_versions": [
            "8.0.8"
          ],
          "identifier": "CVE-2021-40690",
          "identifiers": [
            "CVE-2021-40690"
          ],
          "not_impacted": "All versions starting from 8.0.8",
          "package_slug": "maven/org.apache.tomee/tomee",
          "pubdate": "2021-09-19",
          "solution": "Upgrade to version 8.0.8 or above.",
          "title": "Exposure of Sensitive Information to an Unauthorized Actor",
          "urls": [
            "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
          ],
          "uuid": "8976062c-9323-4e8e-92b4-08433bf87301"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:santuario_xml_security_for_java:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2.1.7",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:santuario_xml_security_for_java:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2.2.3",
                "versionStartIncluding": "2.2.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:tomee:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "8.0.8",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apache:cxf:3.4.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_financial_integration:16.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.1.0",
                "versionStartIncluding": "8.0.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "8.2.3",
                "versionStartIncluding": "8.2.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:retail_bulk_data_integration:16.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "ID": "CVE-2021-40690"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20210922 [tomee] 02/02: Update xmlsec to 2.2.3 to mitigate CVE-2021-40690",
              "refsource": "MLIST",
              "tags": [
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20210923 [jira] [Resolved] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
              "refsource": "MLIST",
              "tags": [
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20210923 [jira] [Assigned] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
              "refsource": "MLIST",
              "tags": [
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20210923 [jira] [Updated] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
              "refsource": "MLIST",
              "tags": [
                "Exploit",
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20210923 [jira] [Created] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
              "refsource": "MLIST",
              "tags": [
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "[poi-user] 20210923 Re: CVE-2021-40690 on xmlsec jar",
              "refsource": "MLIST",
              "tags": [
                "Exploit",
                "Issue Tracking",
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8@%3Cuser.poi.apache.org%3E"
            },
            {
              "name": "[debian-lts-announce] 20210927 [SECURITY] [DLA 2767-1] libxml-security-java security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html"
            },
            {
              "name": "[cxf-issues] 20211027 [jira] [Created] (CXF-8613) High Security issues reported with Apache Santuario library bundled in CXF 3.4.4",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59@%3Cissues.cxf.apache.org%3E"
            },
            {
              "name": "[tomee-commits] 20211028 [jira] [Updated] (TOMEE-3798) TomEE (8.0.8) is affected by CVE-2021-40690 vulnerability",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c@%3Ccommits.tomee.apache.org%3E"
            },
            {
              "name": "DSA-5010",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2021/dsa-5010"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
            },
            {
              "name": "N/A",
              "refsource": "N/A",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujul2022.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20230818-0002/",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://security.netapp.com/advisory/ntap-20230818-0002/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-08-18T14:15Z",
      "publishedDate": "2021-09-19T18:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "xml-security-2.1.7-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the xml-security-2.1.7-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-11693",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11693-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-12400 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-12400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-40690 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-40690/"
      }
    ],
    "title": "xml-security-2.1.7-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:11693-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xml-security-2.1.7-1.1.aarch64",
                "product": {
                  "name": "xml-security-2.1.7-1.1.aarch64",
                  "product_id": "xml-security-2.1.7-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-javadoc-2.1.7-1.1.aarch64",
                "product": {
                  "name": "xml-security-javadoc-2.1.7-1.1.aarch64",
                  "product_id": "xml-security-javadoc-2.1.7-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xml-security-2.1.7-1.1.ppc64le",
                "product": {
                  "name": "xml-security-2.1.7-1.1.ppc64le",
                  "product_id": "xml-security-2.1.7-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-javadoc-2.1.7-1.1.ppc64le",
                "product": {
                  "name": "xml-security-javadoc-2.1.7-1.1.ppc64le",
                  "product_id": "xml-security-javadoc-2.1.7-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xml-security-2.1.7-1.1.s390x",
                "product": {
                  "name": "xml-security-2.1.7-1.1.s390x",
                  "product_id": "xml-security-2.1.7-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-javadoc-2.1.7-1.1.s390x",
                "product": {
                  "name": "xml-security-javadoc-2.1.7-1.1.s390x",
                  "product_id": "xml-security-javadoc-2.1.7-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xml-security-2.1.7-1.1.x86_64",
                "product": {
                  "name": "xml-security-2.1.7-1.1.x86_64",
                  "product_id": "xml-security-2.1.7-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xml-security-javadoc-2.1.7-1.1.x86_64",
                "product": {
                  "name": "xml-security-javadoc-2.1.7-1.1.x86_64",
                  "product_id": "xml-security-javadoc-2.1.7-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-2.1.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64"
        },
        "product_reference": "xml-security-2.1.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-2.1.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le"
        },
        "product_reference": "xml-security-2.1.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-2.1.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x"
        },
        "product_reference": "xml-security-2.1.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-2.1.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64"
        },
        "product_reference": "xml-security-2.1.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-javadoc-2.1.7-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64"
        },
        "product_reference": "xml-security-javadoc-2.1.7-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-javadoc-2.1.7-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le"
        },
        "product_reference": "xml-security-javadoc-2.1.7-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-javadoc-2.1.7-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x"
        },
        "product_reference": "xml-security-javadoc-2.1.7-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xml-security-javadoc-2.1.7-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
        },
        "product_reference": "xml-security-javadoc-2.1.7-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-12400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-12400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-12400",
          "url": "https://www.suse.com/security/cve/CVE-2019-12400"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-12400"
    },
    {
      "cve": "CVE-2021-40690",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-40690"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
          "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
          "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-40690",
          "url": "https://www.suse.com/security/cve/CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193879 for CVE-2021-40690",
          "url": "https://bugzilla.suse.com/1193879"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-2.1.7-1.1.x86_64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.aarch64",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.ppc64le",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.s390x",
            "openSUSE Tumbleweed:xml-security-javadoc-2.1.7-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-40690"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.\n\nThis release of Red Hat JBoss Enterprise Application Platform 7.4.2 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.1, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.2 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)\n\n* wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users (CVE-2021-3717)\n\n* mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server (CVE-2021-30129)\n\n* jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)\n\n* resteasy: Error message exposes endpoint class information (CVE-2021-20289)\n\n * xmlsec: xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:4679",
        "url": "https://access.redhat.com/errata/RHSA-2021:4679"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=7.4",
        "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches\u0026product=appplatform\u0026version=7.4"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index"
      },
      {
        "category": "external",
        "summary": "1935927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935927"
      },
      {
        "category": "external",
        "summary": "1977362",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1977362"
      },
      {
        "category": "external",
        "summary": "1981527",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981527"
      },
      {
        "category": "external",
        "summary": "1991305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1991305"
      },
      {
        "category": "external",
        "summary": "1995259",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995259"
      },
      {
        "category": "external",
        "summary": "2011190",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011190"
      },
      {
        "category": "external",
        "summary": "JBEAP-21308",
        "url": "https://issues.redhat.com/browse/JBEAP-21308"
      },
      {
        "category": "external",
        "summary": "JBEAP-22208",
        "url": "https://issues.redhat.com/browse/JBEAP-22208"
      },
      {
        "category": "external",
        "summary": "JBEAP-22213",
        "url": "https://issues.redhat.com/browse/JBEAP-22213"
      },
      {
        "category": "external",
        "summary": "JBEAP-22254",
        "url": "https://issues.redhat.com/browse/JBEAP-22254"
      },
      {
        "category": "external",
        "summary": "JBEAP-22255",
        "url": "https://issues.redhat.com/browse/JBEAP-22255"
      },
      {
        "category": "external",
        "summary": "JBEAP-22344",
        "url": "https://issues.redhat.com/browse/JBEAP-22344"
      },
      {
        "category": "external",
        "summary": "JBEAP-22347",
        "url": "https://issues.redhat.com/browse/JBEAP-22347"
      },
      {
        "category": "external",
        "summary": "JBEAP-22365",
        "url": "https://issues.redhat.com/browse/JBEAP-22365"
      },
      {
        "category": "external",
        "summary": "JBEAP-22367",
        "url": "https://issues.redhat.com/browse/JBEAP-22367"
      },
      {
        "category": "external",
        "summary": "JBEAP-22435",
        "url": "https://issues.redhat.com/browse/JBEAP-22435"
      },
      {
        "category": "external",
        "summary": "JBEAP-22462",
        "url": "https://issues.redhat.com/browse/JBEAP-22462"
      },
      {
        "category": "external",
        "summary": "JBEAP-22487",
        "url": "https://issues.redhat.com/browse/JBEAP-22487"
      },
      {
        "category": "external",
        "summary": "JBEAP-22493",
        "url": "https://issues.redhat.com/browse/JBEAP-22493"
      },
      {
        "category": "external",
        "summary": "JBEAP-22494",
        "url": "https://issues.redhat.com/browse/JBEAP-22494"
      },
      {
        "category": "external",
        "summary": "JBEAP-22500",
        "url": "https://issues.redhat.com/browse/JBEAP-22500"
      },
      {
        "category": "external",
        "summary": "JBEAP-22504",
        "url": "https://issues.redhat.com/browse/JBEAP-22504"
      },
      {
        "category": "external",
        "summary": "JBEAP-22515",
        "url": "https://issues.redhat.com/browse/JBEAP-22515"
      },
      {
        "category": "external",
        "summary": "JBEAP-22517",
        "url": "https://issues.redhat.com/browse/JBEAP-22517"
      },
      {
        "category": "external",
        "summary": "JBEAP-22522",
        "url": "https://issues.redhat.com/browse/JBEAP-22522"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4679.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.2 security update",
    "tracking": {
      "current_release_date": "2026-05-14T22:31:12+00:00",
      "generator": {
        "date": "2026-05-14T22:31:12+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2021:4679",
      "initial_release_date": "2021-11-15T17:05:54+00:00",
      "revision_history": [
        {
          "date": "2021-11-15T17:05:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-11-10T20:52:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-14T22:31:12+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Enterprise Application Platform 7",
                "product": {
                  "name": "Red Hat JBoss Enterprise Application Platform 7",
                  "product_id": "Red Hat JBoss Enterprise Application Platform 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-3629",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-04-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1977362"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: potential security issue in flow control over HTTP/2 may lead to DOS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3629"
        },
        {
          "category": "external",
          "summary": "RHBZ#1977362",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1977362"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3629",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3629"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3629",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3629"
        }
      ],
      "release_date": "2021-03-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "undertow: potential security issue in flow control over HTTP/2 may lead to DOS"
    },
    {
      "cve": "CVE-2021-3717",
      "cwe": {
        "id": "CWE-552",
        "name": "Files or Directories Accessible to External Parties"
      },
      "discovery_date": "2021-07-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1991305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3717"
        },
        {
          "category": "external",
          "summary": "RHBZ#1991305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1991305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3717",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3717"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3717",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3717"
        }
      ],
      "release_date": "2021-08-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dirk Papenberg"
          ],
          "organization": "NTT DATA Germany"
        }
      ],
      "cve": "CVE-2021-20289",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2021-03-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1935927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method\u0027s parameter value. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy: Error message exposes endpoint class information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-20289"
        },
        {
          "category": "external",
          "summary": "RHBZ#1935927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20289",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-20289"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20289",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20289"
        }
      ],
      "release_date": "2021-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "resteasy: Error message exposes endpoint class information"
    },
    {
      "cve": "CVE-2021-30129",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-07-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1981527"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat OpenStack Platform\u0027s OpenDaylight will not be updated for this flaw because it was deprecated as of OpenStack Platform 14 and is only receiving security fixes for Critical flaws.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-30129"
        },
        {
          "category": "external",
          "summary": "RHBZ#1981527",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981527"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-30129",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-30129"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-30129",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30129"
        }
      ],
      "release_date": "2021-07-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server"
    },
    {
      "cve": "CVE-2021-37714",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-08-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1995259"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "RHBZ#1995259",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995259"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-37714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-37714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c",
          "url": "https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c"
        }
      ],
      "release_date": "2021-08-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck"
    },
    {
      "cve": "CVE-2021-40690",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-09-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2011190"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xml-security: XPath Transform abuse allows for information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Since OpenShift Container Platform (OCP) 4.7, the logging-elasticsearch6-container is shipping as a part of the OpenShift Logging product (openshift-logging/elasticsearch6-rhel8). The elasticsearch component delivered in OCP 4.6 is marked as `Out of support scope` because these versions are already under Maintenance Phase of the support.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Enterprise Application Platform 7"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "RHBZ#2011190",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011190"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40690",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40690",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E",
          "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
        }
      ],
      "release_date": "2021-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-11-15T17:05:54+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nThe References section of this erratum contains a download link (you must log in to download the update).",
          "product_ids": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:4679"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Enterprise Application Platform 7"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xml-security: XPath Transform abuse allows for information disclosure"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This release of Red Hat JBoss Enterprise Application Platform 7.3.10 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.3.9, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.3.10 Release Notes for information about the most significant bug fixes and enhancements included in this release.\n\nSecurity Fix(es):\n\n* undertow: potential security issue in flow control over HTTP/2 may lead to DOS (CVE-2021-3629)\n\n* wildfly-elytron: possible timing attack in ScramServer (CVE-2021-3642)\n\n* wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users (CVE-2021-3717)\n\n* jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck (CVE-2021-37714)\n\n* xml-security: XPath Transform abuse allows for information disclosure (CVE-2021-40690)\n\n* resteasy: Error message exposes endpoint class information (CVE-2021-20289)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2021:5149",
        "url": "https://access.redhat.com/errata/RHSA-2021:5149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/"
      },
      {
        "category": "external",
        "summary": "1935927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935927"
      },
      {
        "category": "external",
        "summary": "1977362",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1977362"
      },
      {
        "category": "external",
        "summary": "1981407",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981407"
      },
      {
        "category": "external",
        "summary": "1991305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1991305"
      },
      {
        "category": "external",
        "summary": "1995259",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995259"
      },
      {
        "category": "external",
        "summary": "2011190",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011190"
      },
      {
        "category": "external",
        "summary": "JBEAP-22143",
        "url": "https://issues.redhat.com/browse/JBEAP-22143"
      },
      {
        "category": "external",
        "summary": "JBEAP-22314",
        "url": "https://issues.redhat.com/browse/JBEAP-22314"
      },
      {
        "category": "external",
        "summary": "JBEAP-22332",
        "url": "https://issues.redhat.com/browse/JBEAP-22332"
      },
      {
        "category": "external",
        "summary": "JBEAP-22343",
        "url": "https://issues.redhat.com/browse/JBEAP-22343"
      },
      {
        "category": "external",
        "summary": "JBEAP-22363",
        "url": "https://issues.redhat.com/browse/JBEAP-22363"
      },
      {
        "category": "external",
        "summary": "JBEAP-22490",
        "url": "https://issues.redhat.com/browse/JBEAP-22490"
      },
      {
        "category": "external",
        "summary": "JBEAP-22501",
        "url": "https://issues.redhat.com/browse/JBEAP-22501"
      },
      {
        "category": "external",
        "summary": "JBEAP-22523",
        "url": "https://issues.redhat.com/browse/JBEAP-22523"
      },
      {
        "category": "external",
        "summary": "JBEAP-22734",
        "url": "https://issues.redhat.com/browse/JBEAP-22734"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5149.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6",
    "tracking": {
      "current_release_date": "2026-05-14T22:31:23+00:00",
      "generator": {
        "date": "2026-05-14T22:31:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2021:5149",
      "initial_release_date": "2021-12-15T14:52:07+00:00",
      "revision_history": [
        {
          "date": "2021-12-15T14:52:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2021-12-15T14:52:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-14T22:31:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss EAP 7.3 for RHEL 6 Server",
                "product": {
                  "name": "Red Hat JBoss EAP 7.3 for RHEL 6 Server",
                  "product_id": "6Server-JBEAP-7.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.3::el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Enterprise Application Platform"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.10.15-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
                  "product_id": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j@2.2.7-1.redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.41-1.SP1_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.11.5-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
                  "product_id": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.3.12-1.redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src",
                  "product_id": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-xml-security@2.1.7-1.redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.43-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
                "product": {
                  "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
                  "product_id": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jsoup@1.14.2-1.redhat_00002.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
                "product": {
                  "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
                  "product_id": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jakarta-el@3.0.3-3.redhat_00007.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
                  "product_id": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-10.Final_redhat_00011.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
                "product": {
                  "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
                  "product_id": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.5.3-1.Final_redhat_00001.1.el6eap?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
                "product": {
                  "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
                  "product_id": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.3.10-2.GA_redhat_00003.1.el6eap?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.10.15-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.10.15-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-bindings@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-policy@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-common@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-dom@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-policy-stax@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-stax@2.2.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-undertow@2.0.41-1.SP1_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-atom-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-cdi@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-client-microprofile@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-crypto@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jackson2-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxb-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jaxrs@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jettison-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jose-jwt@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-jsapi@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-binding-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-json-p-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-multipart-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-rxjava2@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-spring@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-validator-provider-11@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-resteasy-yaml-provider@3.11.5-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf@3.3.12-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt@3.3.12-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-services@3.3.12-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools@3.3.12-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-xml-security@2.1.7-1.redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.43-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
                  "product_id": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jsoup@1.14.2-1.redhat_00002.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
                  "product_id": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jakarta-el@3.0.3-3.redhat_00007.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.3@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2-to-eap7.3@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.3-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly15.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly16.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly17.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly18.0-server@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                "product": {
                  "name": "eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_id": "eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0@1.7.2-10.Final_redhat_00011.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-api@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-impl@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-common-spi@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-api@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-core-impl@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-deployers-common@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-jdbc@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                "product": {
                  "name": "eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_id": "eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-ironjacamar-validator@1.5.3-1.Final_redhat_00001.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly@7.3.10-2.GA_redhat_00003.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs@7.3.10-2.GA_redhat_00003.1.el6eap?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                "product": {
                  "name": "eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_id": "eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/eap7-wildfly-modules@7.3.10-2.GA_redhat_00003.1.el6eap?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch"
        },
        "product_reference": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src"
        },
        "product_reference": "eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src"
        },
        "product_reference": "eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch"
        },
        "product_reference": "eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch"
        },
        "product_reference": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src"
        },
        "product_reference": "eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch"
        },
        "product_reference": "eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch"
        },
        "product_reference": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src as a component of Red Hat JBoss EAP 7.3 for RHEL 6 Server",
          "product_id": "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        },
        "product_reference": "eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src",
        "relates_to_product_reference": "6Server-JBEAP-7.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-3629",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-04-06T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1977362"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undertow: potential security issue in flow control over HTTP/2 may lead to DOS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3629"
        },
        {
          "category": "external",
          "summary": "RHBZ#1977362",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1977362"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3629",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3629"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3629",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3629"
        }
      ],
      "release_date": "2021-03-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "undertow: potential security issue in flow control over HTTP/2 may lead to DOS"
    },
    {
      "cve": "CVE-2021-3642",
      "cwe": {
        "id": "CWE-203",
        "name": "Observable Discrepancy"
      },
      "discovery_date": "2021-06-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1981407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly-elytron: possible timing attack in ScramServer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3642"
        },
        {
          "category": "external",
          "summary": "RHBZ#1981407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1981407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3642",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3642"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3642",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3642"
        }
      ],
      "release_date": "2021-06-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly-elytron: possible timing attack in ScramServer"
    },
    {
      "cve": "CVE-2021-3717",
      "cwe": {
        "id": "CWE-552",
        "name": "Files or Directories Accessible to External Parties"
      },
      "discovery_date": "2021-07-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1991305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-3717"
        },
        {
          "category": "external",
          "summary": "RHBZ#1991305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1991305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3717",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-3717"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3717",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3717"
        }
      ],
      "release_date": "2021-08-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Dirk Papenberg"
          ],
          "organization": "NTT DATA Germany"
        }
      ],
      "cve": "CVE-2021-20289",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2021-03-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1935927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method\u0027s parameter value. The highest threat from this vulnerability is to data confidentiality.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy: Error message exposes endpoint class information",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-20289"
        },
        {
          "category": "external",
          "summary": "RHBZ#1935927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20289",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-20289"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20289",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20289"
        }
      ],
      "release_date": "2021-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "resteasy: Error message exposes endpoint class information"
    },
    {
      "cve": "CVE-2021-37714",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2021-08-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1995259"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "RHBZ#1995259",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995259"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-37714",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-37714",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-37714"
        },
        {
          "category": "external",
          "summary": "https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c",
          "url": "https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c"
        }
      ],
      "release_date": "2021-08-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck"
    },
    {
      "cve": "CVE-2021-40690",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2021-09-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2011190"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "xml-security: XPath Transform abuse allows for information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Since OpenShift Container Platform (OCP) 4.7, the logging-elasticsearch6-container is shipping as a part of the OpenShift Logging product (openshift-logging/elasticsearch6-rhel8). The elasticsearch component delivered in OCP 4.6 is marked as `Out of support scope` because these versions are already under Maintenance Phase of the support.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
          "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
          "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "RHBZ#2011190",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2011190"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-40690",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-40690",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-40690"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E",
          "url": "https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E"
        }
      ],
      "release_date": "2021-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2021-12-15T14:52:07+00:00",
          "details": "Before applying this update, back up your existing Red Hat JBoss Enterprise Application Platform installation and deployed applications.\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2021:5149"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-0:3.3.12-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-apache-cxf-rt-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-services-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-apache-cxf-tools-0:3.3.12-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-0:1.5.3-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-common-spi-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-api-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-core-impl-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-deployers-common-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-jdbc-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-ironjacamar-validator-0:1.5.3-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jakarta-el-0:3.0.3-3.redhat_00007.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-ejb-client-0:4.0.43-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-0:1.7.2-10.Final_redhat_00011.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-cli-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-core-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap6.4-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.2-to-eap7.3-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-eap7.3-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly10.1-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly11.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly12.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly13.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly14.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly15.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly16.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly17.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly18.0-server-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly8.2-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jboss-server-migration-wildfly9.0-0:1.7.2-10.Final_redhat_00011.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-jsoup-0:1.14.2-1.redhat_00002.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-0:3.11.5-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-resteasy-atom-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-cdi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-client-microprofile-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-crypto-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jackson2-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxb-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jaxrs-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jettison-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jose-jwt-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-jsapi-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-binding-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-json-p-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-multipart-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-rxjava2-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-spring-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-validator-provider-11-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-resteasy-yaml-provider-0:3.11.5-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-undertow-0:2.0.41-1.SP1_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-0:7.3.10-2.GA_redhat_00003.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-0:1.10.15-1.Final_redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wildfly-elytron-tool-0:1.10.15-1.Final_redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-javadocs-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wildfly-modules-0:7.3.10-2.GA_redhat_00003.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-0:2.2.7-1.redhat_00001.1.el6eap.src",
            "6Server-JBEAP-7.3:eap7-wss4j-bindings-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-policy-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-common-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-dom-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-policy-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-wss4j-ws-security-stax-0:2.2.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.noarch",
            "6Server-JBEAP-7.3:eap7-xml-security-0:2.1.7-1.redhat_00001.1.el6eap.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "xml-security: XPath Transform abuse allows for information disclosure"
    }
  ]
}