{
  "threat_severity" : "Important",
  "public_date" : "2022-01-18T00:00:00Z",
  "bugzilla" : {
    "description" : "log4j: Unsafe deserialization flaw in Chainsaw log viewer",
    "id" : "2041967",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2041967"
  },
  "cvss3" : {
    "cvss3_base_score" : "8.8",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-502",
  "details" : [ "CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.", "A flaw was found in the log4j 1.x chainsaw component, where the contents of certain log entries are deserialized and possibly permit code execution. This flaw allows an attacker to send a malicious request with serialized data to the server to be deserialized when the chainsaw component is run." ],
  "statement" : "Chainsaw is a standalone graphical user interface for viewing log entries in log4j. This flaw may be bypassed by using other available means to access log entries.\nRed Hat Satellite bundles log4j-over-slf4j with Candlepin, however, product is not affected as it uses logback framework for logging.\nRed Hat Virtualization ships a vulnerable version of the log4j package, however chainsaw is not part of typical use cases. An attacker looking to exploit this would need to not only be able to generate a malicious log entry, but also have the necessary access and permissions to start chainsaw on the engine node. Therefore the impact of this vulnerability for Red Hat Virtualization is rated Low.\nSimilar to Red Hat Virtualization in OpenShift Container Platform (OCP), the Hive/Presto/Hadoop components that comprise the OCP Metering stack, ship the vulnerable version of log4j package, however vulnerable chainsaw component is not used by default. Therefore the impact to OCP is reduced to Low.",
  "affected_release" : [ {
    "product_name" : "EAP 6.4.24 release",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5458",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6"
  }, {
    "product_name" : "EAP 6.4 log4j async",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0437",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6.4",
    "package" : "log4j",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat AMQ Streams 1.6.7",
    "release_date" : "2022-02-08T00:00:00Z",
    "advisory" : "RHSA-2022:0467",
    "cpe" : "cpe:/a:redhat:amq_streams:1"
  }, {
    "product_name" : "Red Hat AMQ Streams 2.0.1",
    "release_date" : "2022-02-08T00:00:00Z",
    "advisory" : "RHSA-2022:0469",
    "cpe" : "cpe:/a:redhat:amq_streams:2",
    "package" : "log4j"
  }, {
    "product_name" : "Red Hat Data Grid 7.3.9",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0430",
    "cpe" : "cpe:/a:redhat:jboss_data_grid:7.3",
    "package" : "log4j",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6 Extended Lifecycle Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_els:6",
    "package" : "log4j-0:1.2.14-6.6.el6_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.3 Advanced Update Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.3",
    "package" : "log4j-0:1.2.17-17.el7_3"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.4 Advanced Update Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.4",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.6 Advanced Update Support(Disable again in 2026 - SPRHEL-7118)",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.6",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.6 Telco Extended Update Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.6",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.6 Update Services for SAP Solutions",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.6",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.7 Advanced Update Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_aus:7.7",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.7 Telco Extended Update Support",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_tus:7.7",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7.7 Update Services for SAP Solutions",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0442",
    "cpe" : "cpe:/o:redhat:rhel_e4s:7.7",
    "package" : "log4j-0:1.2.17-18.el7_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2022-01-26T00:00:00Z",
    "advisory" : "RHSA-2022:0290",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "parfait:0.5-8050020220124063900.6b489b78"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions",
    "release_date" : "2022-01-26T00:00:00Z",
    "advisory" : "RHSA-2022:0294",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.1",
    "package" : "parfait:0.5-8010020220124232535.d5701770"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Extended Update Support",
    "release_date" : "2022-01-26T00:00:00Z",
    "advisory" : "RHSA-2022:0291",
    "cpe" : "cpe:/a:redhat:rhel_eus:8.2",
    "package" : "parfait:0.5-8020020220124231008.1c5d4e8a"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support",
    "release_date" : "2022-01-26T00:00:00Z",
    "advisory" : "RHSA-2022:0289",
    "cpe" : "cpe:/a:redhat:rhel_eus:8.4",
    "package" : "parfait:0.5-8040020220124230039.d304d9ed"
  }, {
    "product_name" : "Red Hat Fuse 7.10.1",
    "release_date" : "2022-02-23T00:00:00Z",
    "advisory" : "RHSA-2022:0661",
    "cpe" : "cpe:/a:redhat:jboss_fuse:7",
    "package" : "log4j",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Fuse/AMQ 6.3.20",
    "release_date" : "2022-02-15T00:00:00Z",
    "advisory" : "RHSA-2022:0553",
    "cpe" : "cpe:/a:redhat:jboss_amq:6.3",
    "package" : "log4j",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat Fuse/AMQ 6.3.20",
    "release_date" : "2022-02-15T00:00:00Z",
    "advisory" : "RHSA-2022:0553",
    "cpe" : "cpe:/a:redhat:jboss_fuse:6.3",
    "package" : "log4j"
  }, {
    "product_name" : "Red Hat JBoss Data Virtualization 6.4.8.SP1",
    "release_date" : "2022-02-09T00:00:00Z",
    "advisory" : "RHSA-2022:0497",
    "cpe" : "cpe:/a:redhat:jboss_data_virtualization:6.4",
    "package" : "log4j"
  }, {
    "product_name" : "Red Hat JBoss Data Virtualization 6.4.8.SP2",
    "release_date" : "2022-02-10T00:00:00Z",
    "advisory" : "RHSA-2022:0507",
    "cpe" : "cpe:/a:redhat:jboss_data_virtualization:6.4",
    "package" : "log4j"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0438",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0438",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5459",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el6",
    "package" : "jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0438",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0438",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "log4j-jboss-logmanager-0:1.1.4-3.Final_redhat_00002.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-appclient-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-bundles-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-cli-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-client-all-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-clustering-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-cmp-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-connector-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-controller-client-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-core-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-core-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-deployment-repository-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-deployment-scanner-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-domain-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-domain-http-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-domain-management-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-ee-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-ee-deployment-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-ejb3-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-embedded-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-host-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jacorb-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-javadocs-0:7.5.24-1.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jaxr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jaxrs-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jdr-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jpa-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jsf-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-jsr77-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-logging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-mail-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-management-client-content-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-messaging-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-modcluster-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-modules-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-naming-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-network-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-osgi-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-osgi-configadmin-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-osgi-service-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-picketlink-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-platform-mbean-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-pojo-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-process-controller-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-product-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-protocol-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-remoting-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-sar-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-security-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-server-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-standalone-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-system-jmx-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-threads-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-transactions-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-version-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-web-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-webservices-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossas-welcome-content-eap-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-weld-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jboss-as-xts-0:7.5.24-2.Final_redhat_00001.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossts-1:4.17.45-2.Final_redhat_2.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7",
    "release_date" : "2022-06-30T00:00:00Z",
    "advisory" : "RHSA-2022:5460",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:6::el7",
    "package" : "jbossweb-0:7.5.32-2.Final_redhat_1.2.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0435",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4",
    "package" : "log4j",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7",
    "release_date" : "2022-04-11T00:00:00Z",
    "advisory" : "RHSA-2022:1299",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4",
    "package" : "log4j",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7",
    "release_date" : "2024-08-26T00:00:00Z",
    "advisory" : "RHSA-2024:5856",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7",
    "package" : "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.ep7.el7"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7",
    "release_date" : "2024-11-25T00:00:00Z",
    "advisory" : "RHSA-2024:10207",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7",
    "package" : "eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0436",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8",
    "package" : "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el8eap",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8",
    "release_date" : "2022-04-11T00:00:00Z",
    "advisory" : "RHSA-2022:1297",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8",
    "package" : "eap7-log4j-0:2.17.1-1.redhat_00001.1.el8eap",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0436",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7",
    "package" : "eap7-log4j-jboss-logmanager-0:1.2.2-1.Final_redhat_00002.1.el7eap",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7",
    "release_date" : "2022-04-11T00:00:00Z",
    "advisory" : "RHSA-2022:1296",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7",
    "package" : "eap7-log4j-0:2.17.1-1.redhat_00001.1.el7eap",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Web Server 3.1",
    "release_date" : "2022-02-14T00:00:00Z",
    "advisory" : "RHSA-2022:0527",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:3.1",
    "package" : "log4j-eap6",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Web Server 3 for RHEL 7",
    "release_date" : "2022-02-14T00:00:00Z",
    "advisory" : "RHSA-2022:0524",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7",
    "package" : "log4j-eap6-0:1.2.17-3.redhat_00008.1.ep6.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Web Server 3 for RHEL 7",
    "release_date" : "2022-02-14T00:00:00Z",
    "advisory" : "RHSA-2022:0524",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7",
    "package" : "tomcat7-0:7.0.70-46.ep7.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Web Server 3 for RHEL 7",
    "release_date" : "2022-02-14T00:00:00Z",
    "advisory" : "RHSA-2022:0524",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7",
    "package" : "tomcat8-0:8.0.36-49.ep7.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat JBoss Web Server 3 for RHEL 7",
    "release_date" : "2022-02-14T00:00:00Z",
    "advisory" : "RHSA-2022:0524",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7",
    "package" : "tomcat-native-0:1.2.23-26.redhat_26.ep7.el7",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Single Sign-On 7.4.10",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0446",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7",
    "package" : "log4j",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Single Sign-On 7.5 for RHEL 7",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0447",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7.5::el7",
    "package" : "rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Single Sign-On 7.5 for RHEL 8",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0448",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7.5::el8",
    "package" : "rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Software Collections for Red Hat Enterprise Linux 7",
    "release_date" : "2022-02-03T00:00:00Z",
    "advisory" : "RHSA-2022:0439",
    "cpe" : "cpe:/a:redhat:rhel_software_collections:3::el7",
    "package" : "rh-maven36-log4j12-0:1.2.17-23.4.el7"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.4",
    "release_date" : "2022-02-08T00:00:00Z",
    "advisory" : "RHSA-2022:0475",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.4:el8",
    "package" : "org.ovirt.engine-root-0:4.4.10.6-1",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat Virtualization Engine 4.4",
    "release_date" : "2022-02-08T00:00:00Z",
    "advisory" : "RHSA-2022:0475",
    "cpe" : "cpe:/a:redhat:rhev_manager:4.4:el8",
    "package" : "snmp4j-0:3.6.4-0.1.el8ev",
    "impact" : "low"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0444",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "rh-sso-7/sso74-openshift-rhel8:7.4-45"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0445",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "rh-sso-7/sso74-openj9-openshift-rhel8:7.4-60"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0450",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "rh-sso-7/sso75-openshift-rhel8:7.5-17"
  }, {
    "product_name" : "RHEL-8 based Middleware Containers",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0450",
    "cpe" : "cpe:/a:redhat:rhosemc:1.0::el8",
    "package" : "rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-9"
  }, {
    "product_name" : "RHSSO 7.5.1",
    "release_date" : "2022-02-07T00:00:00Z",
    "advisory" : "RHSA-2022:0449",
    "cpe" : "cpe:/a:redhat:red_hat_single_sign_on:7",
    "package" : "log4j",
    "impact" : "low"
  } ],
  "package_state" : [ {
    "product_name" : "A-MQ Clients 2",
    "fix_state" : "Affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:a_mq_clients:2",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat AMQ Broker 7",
    "fix_state" : "Affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:amq_broker:7",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat build of Quarkus",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:quarkus:2"
  }, {
    "product_name" : "Red Hat Data Grid 8",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jboss_data_grid:8"
  }, {
    "product_name" : "Red Hat Decision Manager 7",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_brms_platform:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "tomcat",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Integration Camel K 1",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:integration:1"
  }, {
    "product_name" : "Red Hat Integration Camel Quarkus 1",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:camel_quarkus:2"
  }, {
    "product_name" : "Red Hat JBoss Enterprise Application Platform Expansion Pack",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jbosseapxp"
  }, {
    "product_name" : "Red Hat JBoss Fuse Service Works 6",
    "fix_state" : "Out of support scope",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jboss_fuse_service_works:6",
    "impact" : "moderate"
  }, {
    "product_name" : "Red Hat JBoss Operations Network 3",
    "fix_state" : "Out of support scope",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jboss_operations_network:3",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat OpenShift Application Runtimes",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:openshift_application_runtimes:1.0"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-metering-hadoop",
    "cpe" : "cpe:/a:redhat:openshift:4",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-metering-hive",
    "cpe" : "cpe:/a:redhat:openshift:4",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Affected",
    "package_name" : "openshift4/ose-metering-presto",
    "cpe" : "cpe:/a:redhat:openshift:4",
    "impact" : "low"
  }, {
    "product_name" : "Red Hat OpenStack Platform 13 (Queens)",
    "fix_state" : "Out of support scope",
    "package_name" : "opendaylight",
    "cpe" : "cpe:/a:redhat:openstack:13"
  }, {
    "product_name" : "Red Hat Process Automation 7",
    "fix_state" : "Not affected",
    "package_name" : "log4j",
    "cpe" : "cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Not affected",
    "package_name" : "log4j-over-slf4j",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Not affected",
    "package_name" : "ovirt-engine",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Not affected",
    "package_name" : "ovirt-engine-extension-logger-log4j",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  }, {
    "product_name" : "Red Hat Virtualization 4",
    "fix_state" : "Not affected",
    "package_name" : "vdsm-jsonrpc-java",
    "cpe" : "cpe:/o:redhat:rhev_hypervisor:4"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2022-23307\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-23307\nhttps://www.openwall.com/lists/oss-security/2022/01/18/5" ],
  "name" : "CVE-2022-23307",
  "mitigation" : {
    "value" : "These are the mitigations available for this flaw for log4j 1.x:\n- Avoid using Chainsaw to view logs, and instead use some other utility, especially if there is a log view available within the product itself.\n- Remove the Chainsaw classes from the log4j jar files. For example:\n```\nzip -q -d log4j-*.jar org/apache/log4j/chainsaw/*\n```\n(log4j jars may be nested in zip archives within product)",
    "lang" : "en:us"
  },
  "csaw" : false
}