{
  "schema_version": "1.7.0",
  "id": "RHSA-2024:10207",
  "related": [],
  "upstream": [
    "CVE-2021-3859",
    "CVE-2021-4104",
    "CVE-2022-23221",
    "CVE-2022-23305",
    "CVE-2022-23307",
    "CVE-2022-34169",
    "CVE-2022-41853",
    "CVE-2022-46364",
    "CVE-2023-3171",
    "CVE-2023-5685",
    "CVE-2023-26464",
    "CVE-2023-39410",
    "CVE-2024-28752",
    "CVE-2024-47561"
  ],
  "published": "2024-11-26T07:31:41Z",
  "modified": "2026-09-02T10:02:44Z",
  "summary": "Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "affected": [
    {
      "package": {
        "name": "eap7-apache-cxf",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-apache-cxf"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.4.10-1.SP1_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-apache-cxf-rt",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-apache-cxf-rt"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.4.10-1.SP1_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-apache-cxf-services",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-apache-cxf-services"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.4.10-1.SP1_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-apache-cxf-tools",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-apache-cxf-tools"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.4.10-1.SP1_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-avro",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-avro"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.6-8.redhat_00003.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-h2database",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-h2database"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.4.197-3.redhat_00004.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-annotations-api_1.3_spec",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-annotations-api_1.3_spec"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.0.1-4.Final_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-marshalling",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-marshalling"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.0.15-1.Final_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-marshalling-river",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-marshalling-river"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.0.15-1.Final_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-cli",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-cli"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-core",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-core"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap6.4",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap6.4-to-eap7.3",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap6.4-to-eap7.3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap7.0",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap7.1",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap7.2",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap7.2-to-eap7.3",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.2-to-eap7.3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-eap7.3-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-eap7.3-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly10.0",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly10.1",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly10.1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly11.0",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly11.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly12.0",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly12.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly13.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly13.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly14.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly14.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly15.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly15.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly16.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly16.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly17.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly17.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly18.0-server",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly18.0-server"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly8.2",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly8.2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-server-migration-wildfly9.0",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-server-migration-wildfly9.0"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.7.2-12.Final_redhat_00013.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-jboss-xnio-base",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-jboss-xnio-base"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:3.7.13-1.Final_redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-log4j-jboss-logmanager",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-log4j-jboss-logmanager"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:1.2.2-2.Final_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wildfly"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.3.11-4.GA_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-java-jdk11",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk11"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.3.11-4.GA_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-java-jdk8",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wildfly-java-jdk8"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.3.11-4.GA_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-javadocs",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wildfly-javadocs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.3.11-4.GA_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wildfly-modules",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wildfly-modules"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:7.3.11-4.GA_redhat_00002.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-bindings",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-bindings"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-policy",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-policy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-ws-security-common",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-common"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-ws-security-dom",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-dom"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-ws-security-policy-stax",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-policy-stax"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-wss4j-ws-security-stax",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-wss4j-ws-security-stax"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.3.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-xalan-j2",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-xalan-j2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.7.1-38.redhat_00015.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "eap7-xml-security",
        "ecosystem": "Red Hat:jboss_enterprise_application_platform_eus:7.3::el7",
        "purl": "pkg:rpm/redhat/eap7-xml-security"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:2.2.3-2.redhat_00001.1.el7eap"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2024:10207"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/updates/classification/#important"
    },
    {
      "type": "ARTICLE",
      "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3"
    },
    {
      "type": "ARTICLE",
      "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010378"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2031667"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041959"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2041967"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044596"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2108554"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2136141"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2155682"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2182864"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2213639"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241822"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242521"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270732"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2316116"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.redhat.com/browse/JBEAP-23025"
    },
    {
      "type": "ADVISORY",
      "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10207.json"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-3859"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3859"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3859"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2021-4104"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/vulnerabilities/RHSB-2021-009"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4104"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301"
    },
    {
      "type": "ARTICLE",
      "url": "https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.openwall.com/lists/oss-security/2021/12/13/1"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-23221"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23221"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23221"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-45hx-wfhj-473x"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-23305"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23305"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23305"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.openwall.com/lists/oss-security/2022/01/18/4"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-23307"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-23307"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23307"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.openwall.com/lists/oss-security/2022/01/18/5"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-34169"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34169"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34169"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-41853"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41853"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-41853"
    },
    {
      "type": "ARTICLE",
      "url": "http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-77xx-rxvh-q682"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46364"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-46364"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46364"
    },
    {
      "type": "ARTICLE",
      "url": "https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-3171"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-3171"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3171"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-5685"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-5685"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5685"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-26464"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-26464"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26464"
    },
    {
      "type": "ARTICLE",
      "url": "https://www.ibm.com/support/pages/security-bulletin-vulnerability-log4j-1216jar-affect-ibm-operations-analytics-log-analysis-cve-2023-26464"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-39410"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-39410"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39410"
    },
    {
      "type": "ARTICLE",
      "url": "https://issues.apache.org/jira/browse/AVRO-3819"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-28752"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-28752"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28752"
    },
    {
      "type": "ARTICLE",
      "url": "https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-qmgx-j96g-4428"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-47561"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-47561"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47561"
    }
  ]
}