{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "XXE vulnerability via user supplied XSLTs", "tracking": { "current_release_date": "2026-08-11T13:55:05+00:00", "generator": { "date": "2026-08-11T13:55:05+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2014-0096", "initial_release_date": "2014-05-27T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T13:55:05+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 5.11", "product": { "name": "Red Hat Enterprise Linux 5.11", "product_id": "rhel-5.11.z.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:5" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6.5", "product": { "name": "Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6.5", "product": { "name": "Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6.5", "product": { "name": "Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6.5", "product": { "name": "Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 6.6", "product": { "name": "Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.0", "product": { "name": "Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::client", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.0", "product": { "name": "Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::computenode", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.0", "product": { "name": "Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.0", "product": { "name": "Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::workstation", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat-0:7.0.42-6.el7_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat@7.0.42-6.el7_0?arch=src&epoch=0" } } }, { "category": "product_version", "name": "tomcat-admin-webapps", "product": { "name": "tomcat-admin-webapps", "product_id": "tomcat-admin-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-admin-webapps" } } }, { "category": "product_version", "name": "tomcat-admin-webapps", "product": { "name": "tomcat-admin-webapps", "product_id": "tomcat-admin-webapps-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-admin-webapps@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-docs-webapp", "product": { "name": "tomcat-docs-webapp", "product_id": "tomcat-docs-webapp", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-docs-webapp" } } }, { "category": "product_version", "name": "tomcat-docs-webapp", "product": { "name": "tomcat-docs-webapp", "product_id": "tomcat-docs-webapp-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-docs-webapp@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-el-2.2-api", "product": { "name": "tomcat-el-2.2-api", "product_id": "tomcat-el-2.2-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-2.2-api" } } }, { "category": "product_version", "name": "tomcat-el-2.2-api", "product": { "name": "tomcat-el-2.2-api", "product_id": "tomcat-el-2.2-api-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-el-2.2-api@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-javadoc", "product": { "name": "tomcat-javadoc", "product_id": "tomcat-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-javadoc" } } }, { "category": "product_version", "name": "tomcat-jsp-2.2-api", "product": { "name": "tomcat-jsp-2.2-api", "product_id": "tomcat-jsp-2.2-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api" } } }, { "category": "product_version", "name": "tomcat-jsp-2.2-api", "product": { "name": "tomcat-jsp-2.2-api", "product_id": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsp-2.2-api@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-jsvc", "product": { "name": "tomcat-jsvc", "product_id": "tomcat-jsvc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsvc" } } }, { "category": "product_version", "name": "tomcat-jsvc", "product": { "name": "tomcat-jsvc", "product_id": "tomcat-jsvc-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-jsvc@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-lib", "product": { "name": "tomcat-lib", "product_id": "tomcat-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-lib" } } }, { "category": "product_version", "name": "tomcat-lib", "product": { "name": "tomcat-lib", "product_id": "tomcat-lib-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-lib@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-servlet-3.0-api", "product": { "name": "tomcat-servlet-3.0-api", "product_id": "tomcat-servlet-3.0-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api" } } }, { "category": "product_version", "name": "tomcat-servlet-3.0-api", "product": { "name": "tomcat-servlet-3.0-api", "product_id": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-servlet-3.0-api@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat-webapps", "product": { "name": "tomcat-webapps", "product_id": "tomcat-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-webapps" } } }, { "category": "product_version", "name": "tomcat-webapps", "product": { "name": "tomcat-webapps", "product_id": "tomcat-webapps-0:7.0.42-6.el7_0", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-webapps@7.0.42-6.el7_0?epoch=0" } } }, { "category": "product_version", "name": "tomcat", "product": { "name": "tomcat", "product_id": "tomcat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat?arch=src" } } }, { "category": "product_version", "name": "tomcat5", "product": { "name": "tomcat5", "product_id": "tomcat5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat5?arch=src" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6-0:6.0.24-72.el6_5.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6@6.0.24-72.el6_5?arch=src&epoch=0" } } }, { "category": "product_version", "name": "tomcat6-admin-webapps", "product": { "name": "tomcat6-admin-webapps", "product_id": "tomcat6-admin-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-admin-webapps" } } }, { "category": "product_version", "name": "tomcat6-admin-webapps", "product": { "name": "tomcat6-admin-webapps", "product_id": "tomcat6-admin-webapps-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-admin-webapps@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-docs-webapp", "product": { "name": "tomcat6-docs-webapp", "product_id": "tomcat6-docs-webapp", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-docs-webapp" } } }, { "category": "product_version", "name": "tomcat6-docs-webapp", "product": { "name": "tomcat6-docs-webapp", "product_id": "tomcat6-docs-webapp-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-docs-webapp@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-el-2.1-api", "product": { "name": "tomcat6-el-2.1-api", "product_id": "tomcat6-el-2.1-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-el-2.1-api" } } }, { "category": "product_version", "name": "tomcat6-el-2.1-api", "product": { "name": "tomcat6-el-2.1-api", "product_id": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-el-2.1-api@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-javadoc", "product": { "name": "tomcat6-javadoc", "product_id": "tomcat6-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-javadoc" } } }, { "category": "product_version", "name": "tomcat6-jsp-2.1-api", "product": { "name": "tomcat6-jsp-2.1-api", "product_id": "tomcat6-jsp-2.1-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api" } } }, { "category": "product_version", "name": "tomcat6-jsp-2.1-api", "product": { "name": "tomcat6-jsp-2.1-api", "product_id": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-jsp-2.1-api@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-lib", "product": { "name": "tomcat6-lib", "product_id": "tomcat6-lib", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-lib" } } }, { "category": "product_version", "name": "tomcat6-lib", "product": { "name": "tomcat6-lib", "product_id": "tomcat6-lib-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-lib@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-log4j", "product": { "name": "tomcat6-log4j", "product_id": "tomcat6-log4j", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-log4j" } } }, { "category": "product_version", "name": "tomcat6-servlet-2.5-api", "product": { "name": "tomcat6-servlet-2.5-api", "product_id": "tomcat6-servlet-2.5-api", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api" } } }, { "category": "product_version", "name": "tomcat6-servlet-2.5-api", "product": { "name": "tomcat6-servlet-2.5-api", "product_id": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-servlet-2.5-api@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6-webapps", "product": { "name": "tomcat6-webapps", "product_id": "tomcat6-webapps", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-webapps" } } }, { "category": "product_version", "name": "tomcat6-webapps", "product": { "name": "tomcat6-webapps", "product_id": "tomcat6-webapps-0:6.0.24-72.el6_5", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6-webapps@6.0.24-72.el6_5?epoch=0" } } }, { "category": "product_version", "name": "tomcat6", "product": { "name": "tomcat6", "product_id": "tomcat6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat6?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tomcat as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat" }, "product_reference": "tomcat", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::computenode:tomcat-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::workstation:tomcat-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::client:tomcat-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:7.0.42-6.el7_0.src as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0.src" }, "product_reference": "tomcat-0:7.0.42-6.el7_0.src", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-admin-webapps" }, "product_reference": "tomcat-admin-webapps", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-admin-webapps-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-admin-webapps-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-docs-webapp" }, "product_reference": "tomcat-docs-webapp", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-docs-webapp-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-docs-webapp-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-2.2-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-el-2.2-api" }, "product_reference": "tomcat-el-2.2-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-2.2-api-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-el-2.2-api-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-el-2.2-api-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-javadoc as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-javadoc" }, "product_reference": "tomcat-javadoc", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-javadoc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-javadoc" }, "product_reference": "tomcat-javadoc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.2-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-jsp-2.2-api" }, "product_reference": "tomcat-jsp-2.2-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsvc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-jsvc" }, "product_reference": "tomcat-jsvc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsvc-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-jsvc-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-jsvc-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-lib" }, "product_reference": "tomcat-lib", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-lib-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-lib-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-3.0-api as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-servlet-3.0-api" }, "product_reference": "tomcat-servlet-3.0-api", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat-webapps" }, "product_reference": "tomcat-webapps", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-0:7.0.42-6.el7_0 as a component of Red Hat Enterprise Linux 7.0", "product_id": "rhel-7.0.z::server:tomcat-webapps-0:7.0.42-6.el7_0" }, "product_reference": "tomcat-webapps-0:7.0.42-6.el7_0", "relates_to_product_reference": "rhel-7.0.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:tomcat.src" }, "product_reference": "tomcat.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat5.src as a component of Red Hat Enterprise Linux 5.11", "product_id": "rhel-5.11.z.els:tomcat5.src" }, "product_reference": "tomcat5.src", "relates_to_product_reference": "rhel-5.11.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6 as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6" }, "product_reference": "tomcat6", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5.src as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5.src" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5.src", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5.src as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5.src" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5.src", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5.src as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5.src" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5.src", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-0:6.0.24-72.el6_5.src as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5.src" }, "product_reference": "tomcat6-0:6.0.24-72.el6_5.src", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-admin-webapps" }, "product_reference": "tomcat6-admin-webapps", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-admin-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-admin-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-admin-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-admin-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-admin-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-admin-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-admin-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-admin-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-admin-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-docs-webapp" }, "product_reference": "tomcat6-docs-webapp", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-docs-webapp-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-docs-webapp-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-docs-webapp-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-docs-webapp-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-docs-webapp-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-docs-webapp-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-docs-webapp-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-docs-webapp-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-docs-webapp-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-el-2.1-api" }, "product_reference": "tomcat6-el-2.1-api", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-el-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-el-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-el-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-el-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-javadoc as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-javadoc" }, "product_reference": "tomcat6-javadoc", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-jsp-2.1-api" }, "product_reference": "tomcat6-jsp-2.1-api", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-lib" }, "product_reference": "tomcat6-lib", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-lib-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-lib-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-lib-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-lib-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-lib-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-lib-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-lib-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-lib-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-lib-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-log4j as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-log4j" }, "product_reference": "tomcat6-log4j", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-servlet-2.5-api" }, "product_reference": "tomcat6-servlet-2.5-api", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6-webapps" }, "product_reference": "tomcat6-webapps", "relates_to_product_reference": "rhel-6.6.els" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::server:tomcat6-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::server" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::computenode:tomcat6-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::computenode" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::workstation:tomcat6-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::workstation" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6-webapps-0:6.0.24-72.el6_5 as a component of Red Hat Enterprise Linux 6.5", "product_id": "rhel-6.5.z::client:tomcat6-webapps-0:6.0.24-72.el6_5" }, "product_reference": "tomcat6-webapps-0:6.0.24-72.el6_5", "relates_to_product_reference": "rhel-6.5.z::client" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat6.src as a component of Red Hat Enterprise Linux 6.6", "product_id": "rhel-6.6.els:tomcat6.src" }, "product_reference": "tomcat6.src", "relates_to_product_reference": "rhel-6.6.els" } ] }, "vulnerabilities": [ { "cve": "CVE-2014-0096", "cwe": { "id": "CWE-611", "name": "Improper Restriction of XML External Entity Reference" }, "discovery_date": "2014-04-16T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6.5.z::client:tomcat6-javadoc", "rhel-6.5.z::computenode:tomcat6-javadoc", "rhel-6.5.z::server:tomcat6-javadoc", "rhel-6.5.z::workstation:tomcat6-javadoc", "rhel-6.6.els:tomcat6-javadoc", "rhel-7-els.els:tomcat-javadoc", "rhel-7.0.z::server:tomcat-javadoc" ] } ], "notes": [ { "category": "other", "text": "This issue does affect JBossWeb as shipped in Red Hat JBoss Enterprise Application Platform 5. Red Hat Product Security has rated this issue as having Low security impact. Red Hat JBoss Enterprise Application Platform 5 is currently in reduced support phase (Phase 2: Maintenance Support), receiving only Critical and Important security updates, hence this issue is not currently planned to be addressed in future updates for Red Hat Enterprise Application Platform 5. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/ and the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.", "title": "Statement" }, { "category": "description", "text": "It was found that the org.apache.catalina.servlets.DefaultServlet implementation in JBoss Web / Apache Tomcat allowed the definition of XML External Entities (XXEs) in provided XSLTs. A malicious application could use this to circumvent intended security restrictions to disclose sensitive information.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::client:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-log4j", "rhel-6.5.z::client:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::computenode:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-log4j", "rhel-6.5.z::computenode:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::server:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-log4j", "rhel-6.5.z::server:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::workstation:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-log4j", "rhel-6.5.z::workstation:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-7.0.z::client:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::computenode:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0.src", "rhel-7.0.z::server:tomcat-admin-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-docs-webapp-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-el-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsvc-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-lib-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::workstation:tomcat-0:7.0.42-6.el7_0" ], "known_affected": [ "rhel-5.11.z.els:tomcat5.src", "rhel-6.6.els:tomcat6", "rhel-6.6.els:tomcat6-admin-webapps", "rhel-6.6.els:tomcat6-docs-webapp", "rhel-6.6.els:tomcat6-el-2.1-api", "rhel-6.6.els:tomcat6-jsp-2.1-api", "rhel-6.6.els:tomcat6-lib", "rhel-6.6.els:tomcat6-log4j", "rhel-6.6.els:tomcat6-servlet-2.5-api", "rhel-6.6.els:tomcat6-webapps", "rhel-6.6.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src" ], "known_not_affected": [ "rhel-6.5.z::client:tomcat6-javadoc", "rhel-6.5.z::computenode:tomcat6-javadoc", "rhel-6.5.z::server:tomcat6-javadoc", "rhel-6.5.z::workstation:tomcat6-javadoc", "rhel-6.6.els:tomcat6-javadoc", "rhel-7-els.els:tomcat-javadoc", "rhel-7.0.z::server:tomcat-javadoc" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2014-0096" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0096" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2014-0096" } ], "remediations": [ { "category": "no_fix_planned", "details": "Will not fix", "product_ids": [ "rhel-5.11.z.els:tomcat5.src" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "rhel-6.6.els:tomcat6", "rhel-6.6.els:tomcat6-admin-webapps", "rhel-6.6.els:tomcat6-docs-webapp", "rhel-6.6.els:tomcat6-el-2.1-api", "rhel-6.6.els:tomcat6-jsp-2.1-api", "rhel-6.6.els:tomcat6-lib", "rhel-6.6.els:tomcat6-log4j", "rhel-6.6.els:tomcat6-servlet-2.5-api", "rhel-6.6.els:tomcat6-webapps", "rhel-6.6.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src" ] }, { "category": "vendor_fix", "date": "2014-07-09T15:16:10+00:00", "details": "Apply advisory RHSA-2014:0865 as per vendors instructions.", "product_ids": [ "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::client:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-log4j", "rhel-6.5.z::client:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::computenode:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-log4j", "rhel-6.5.z::computenode:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::server:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-log4j", "rhel-6.5.z::server:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::workstation:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-log4j", "rhel-6.5.z::workstation:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-webapps-0:6.0.24-72.el6_5" ], "url": "https://access.redhat.com/errata/RHSA-2014:0865" }, { "category": "vendor_fix", "date": "2014-07-02T08:44:18+00:00", "details": "Apply advisory RHSA-2014:0827 as per vendors instructions.", "product_ids": [ "rhel-7.0.z::client:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::computenode:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0.src", "rhel-7.0.z::server:tomcat-admin-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-docs-webapp-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-el-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsvc-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-lib-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::workstation:tomcat-0:7.0.42-6.el7_0" ], "url": "https://access.redhat.com/errata/RHSA-2014:0827" } ], "scores": [ { "cvss_v2": { "version": "2.0", "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N", "baseScore": 2.1 }, "products": [ "rhel-5.11.z.els:tomcat5.src", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::client:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-javadoc", "rhel-6.5.z::client:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-log4j", "rhel-6.5.z::client:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::computenode:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-javadoc", "rhel-6.5.z::computenode:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-log4j", "rhel-6.5.z::computenode:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::server:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-javadoc", "rhel-6.5.z::server:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-log4j", "rhel-6.5.z::server:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::workstation:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-javadoc", "rhel-6.5.z::workstation:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-log4j", "rhel-6.5.z::workstation:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.6.els:tomcat6", "rhel-6.6.els:tomcat6-admin-webapps", "rhel-6.6.els:tomcat6-docs-webapp", "rhel-6.6.els:tomcat6-el-2.1-api", "rhel-6.6.els:tomcat6-javadoc", "rhel-6.6.els:tomcat6-jsp-2.1-api", "rhel-6.6.els:tomcat6-lib", "rhel-6.6.els:tomcat6-log4j", "rhel-6.6.els:tomcat6-servlet-2.5-api", "rhel-6.6.els:tomcat6-webapps", "rhel-6.6.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-javadoc", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-7.0.z::client:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::computenode:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0.src", "rhel-7.0.z::server:tomcat-admin-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-docs-webapp-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-el-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-javadoc", "rhel-7.0.z::server:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsvc-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-lib-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::workstation:tomcat-0:7.0.42-6.el7_0" ] } ], "threats": [ { "category": "impact", "details": "Low", "product_ids": [ "rhel-5.11.z.els:tomcat5.src", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::client:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-javadoc", "rhel-6.5.z::client:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-log4j", "rhel-6.5.z::client:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::client:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::computenode:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-javadoc", "rhel-6.5.z::computenode:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-log4j", "rhel-6.5.z::computenode:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::computenode:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::server:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-javadoc", "rhel-6.5.z::server:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-log4j", "rhel-6.5.z::server:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::server:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-0:6.0.24-72.el6_5.src", "rhel-6.5.z::workstation:tomcat6-admin-webapps-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-docs-webapp-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-el-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-javadoc", "rhel-6.5.z::workstation:tomcat6-jsp-2.1-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-lib-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-log4j", "rhel-6.5.z::workstation:tomcat6-servlet-2.5-api-0:6.0.24-72.el6_5", "rhel-6.5.z::workstation:tomcat6-webapps-0:6.0.24-72.el6_5", "rhel-6.6.els:tomcat6", "rhel-6.6.els:tomcat6-admin-webapps", "rhel-6.6.els:tomcat6-docs-webapp", "rhel-6.6.els:tomcat6-el-2.1-api", "rhel-6.6.els:tomcat6-javadoc", "rhel-6.6.els:tomcat6-jsp-2.1-api", "rhel-6.6.els:tomcat6-lib", "rhel-6.6.els:tomcat6-log4j", "rhel-6.6.els:tomcat6-servlet-2.5-api", "rhel-6.6.els:tomcat6-webapps", "rhel-6.6.els:tomcat6.src", "rhel-7-els.els:tomcat", "rhel-7-els.els:tomcat-admin-webapps", "rhel-7-els.els:tomcat-docs-webapp", "rhel-7-els.els:tomcat-el-2.2-api", "rhel-7-els.els:tomcat-javadoc", "rhel-7-els.els:tomcat-jsp-2.2-api", "rhel-7-els.els:tomcat-jsvc", "rhel-7-els.els:tomcat-lib", "rhel-7-els.els:tomcat-servlet-3.0-api", "rhel-7-els.els:tomcat-webapps", "rhel-7-els.els:tomcat.src", "rhel-7.0.z::client:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::computenode:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-0:7.0.42-6.el7_0.src", "rhel-7.0.z::server:tomcat-admin-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-docs-webapp-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-el-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-javadoc", "rhel-7.0.z::server:tomcat-jsp-2.2-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-jsvc-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-lib-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-servlet-3.0-api-0:7.0.42-6.el7_0", "rhel-7.0.z::server:tomcat-webapps-0:7.0.42-6.el7_0", "rhel-7.0.z::workstation:tomcat-0:7.0.42-6.el7_0" ] } ], "title": "XXE vulnerability via user supplied XSLTs" } ] }