{
  "schema_version": "1.7.0",
  "id": "RHSA-2018:1449",
  "related": [],
  "upstream": [
    "CVE-2016-4978",
    "CVE-2017-3163",
    "CVE-2017-7525",
    "CVE-2017-15095",
    "CVE-2017-17485",
    "CVE-2018-1304",
    "CVE-2018-7489",
    "CVE-2018-8088"
  ],
  "published": "2024-09-20T13:51:33Z",
  "modified": "2026-06-29T10:20:12Z",
  "summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.20 security update",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "affected": [
    {
      "package": {
        "name": "codehaus-jackson",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/codehaus-jackson"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.9.9-12.redhat_6.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "codehaus-jackson-core-asl",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/codehaus-jackson-core-asl"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.9.9-12.redhat_6.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "codehaus-jackson-jaxrs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/codehaus-jackson-jaxrs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.9.9-12.redhat_6.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "codehaus-jackson-mapper-asl",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/codehaus-jackson-mapper-asl"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.9.9-12.redhat_6.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "codehaus-jackson-xc",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/codehaus-jackson-xc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.9.9-12.redhat_6.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "hornetq",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/hornetq"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.25-26.SP24_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-appclient",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-appclient"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-cli",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-cli"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-client-all",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-client-all"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-clustering",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-clustering"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-cmp",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-cmp"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-configadmin",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-configadmin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-connector",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-connector"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-controller",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-controller"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-controller-client",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-controller-client"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-core-security",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-core-security"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-deployment-repository",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-deployment-repository"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-deployment-scanner",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-deployment-scanner"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-domain-http",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-domain-http"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-domain-management",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-domain-management"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-ee",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-ee"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-ee-deployment",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-ee-deployment"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-ejb3",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-ejb3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-embedded",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-embedded"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-host-controller",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-host-controller"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jacorb",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jacorb"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jaxr",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jaxr"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jaxrs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jaxrs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jdr",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jdr"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jmx",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jmx"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jpa",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jpa"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jsf",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jsf"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-jsr77",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-jsr77"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-logging",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-logging"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-mail",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-mail"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-management-client-content",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-management-client-content"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-messaging",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-messaging"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-modcluster",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-modcluster"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-naming",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-naming"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-network",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-network"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-osgi",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-osgi"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-osgi-configadmin",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-osgi-configadmin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-osgi-service",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-osgi-service"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-picketlink",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-picketlink"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-platform-mbean",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-platform-mbean"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-pojo",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-pojo"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-process-controller",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-process-controller"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-protocol",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-protocol"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-remoting",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-remoting"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-sar",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-sar"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-security",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-security"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-system-jmx",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-system-jmx"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-threads",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-threads"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-transactions",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-transactions"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-version",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-version"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-web",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-web"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-webservices",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-webservices"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-weld",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-weld"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jboss-as-xts",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jboss-as-xts"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-appclient",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-appclient"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-bundles",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-bundles"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-core",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-domain",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-domain"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-javadocs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-javadocs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-modules-eap",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-modules-eap"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-product-eap",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-product-eap"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-standalone",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-standalone"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossas-welcome-content-eap",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossas-welcome-content-eap"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.20-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossts",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossts"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:4.17.43-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jbossweb",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jbossweb"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.5.28-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "jgroups",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/jgroups"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:3.2.18-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "lucene-solr",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/lucene-solr"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.6.2-8.redhat_9.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "picketbox",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform:6::el6",
        "purl": "pkg:rpm/redhat/picketbox"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:4.1.7-1.Final_redhat_1.1.ep6.el6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2018:1449"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/updates/classification/#important"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/?version=6.4"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1379207"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1454783"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1506612"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1528565"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548289"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1548909"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1549276"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1559008"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1559011"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1559016"
    },
    {
      "type": "ADVISORY",
      "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1449.json"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2016-4978"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2016-4978"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4978"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2017-3163"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-3163"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-3163"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2017-7525"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1462702"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7525"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7525"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2017-15095"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-15095"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15095"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/solutions/3442891"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2017-17485"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-17485"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-17485"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2018-1304"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1304"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1304"
    },
    {
      "type": "ARTICLE",
      "url": "https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.85"
    },
    {
      "type": "ARTICLE",
      "url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.0.50"
    },
    {
      "type": "ARTICLE",
      "url": "https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.28"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2018-7489"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-7489"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7489"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2018-8088"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-8088"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8088"
    }
  ]
}