{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/undertow-io/undertow","packageName":"undertow","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"2.3.12","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.16.0-18.redhat_00052.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-apache-cxf","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.4.10-2.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-eclipse-jgit","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-elytron-web","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.9.4-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hal-console","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.21-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hibernate","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.3.36-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-infinispan","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:11.0.18-2.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-insights-java-client","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jberet","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.9-3.SP3_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-annotations-api_1.3_spec","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.1-3.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-cert-helper","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.0.27-4.SP2_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.10.0-35.Final_redhat_00034.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-xnio-base","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.12-1.SP2_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jgroups-kubernetes","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.17-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-lucene-solr","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.5.5-6.redhat_2.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.16-4.GA_redhat_00002.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.15.22-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.16.0-18.redhat_00052.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-apache-cxf","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.4.10-2.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-eclipse-jgit","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-elytron-web","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.9.4-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hal-console","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.21-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hibernate","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.3.36-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-infinispan","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:11.0.18-2.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-insights-java-client","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jberet","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.9-3.SP3_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-annotations-api_1.3_spec","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.1-3.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-cert-helper","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.0.27-4.SP2_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.10.0-35.Final_redhat_00034.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-xnio-base","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.12-1.SP2_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jgroups-kubernetes","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.17-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-lucene-solr","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.5.5-6.redhat_2.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.16-4.GA_redhat_00002.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.15.22-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-activemq-artemis","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.16.0-18.redhat_00052.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-apache-cxf","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.4.10-2.redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-eclipse-jgit","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-elytron-web","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.9.4-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hal-console","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.3.21-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-hibernate","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.3.36-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-infinispan","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:11.0.18-2.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-insights-java-client","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jberet","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.3.9-3.SP3_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-annotations-api_1.3_spec","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.0.1-3.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-cert-helper","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.1.2-1.redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-remoting","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.0.27-4.SP2_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-server-migration","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.10.0-35.Final_redhat_00034.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jboss-xnio-base","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.12-1.SP2_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-jgroups-kubernetes","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.17-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-lucene-solr","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.5.5-6.redhat_2.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-undertow","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.30-1.SP1_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.16-4.GA_redhat_00002.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.15.22-1.Final_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","product":"Red Hat JBoss Enterprise Application Platform 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.11-1.SP1_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-undertow","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.3.11-1.SP1_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"quarkus-undertow","product":"Red Hat build of Quarkus","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow","product":"Red Hat Data Grid 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow","product":"Red Hat Decision Manager 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow","product":"Red Hat Fuse 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"undertow","product":"Red Hat JBoss Data Grid 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"undertow","product":"Red Hat JBoss Fuse 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow","product":"Red Hat Process Automation 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"undertow","product":"Red Hat Single Sign-On 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2024-1459","cwes":["CWE-24"],"description":"A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories.","epss":{"date":"2026-11-04","percentile":0.77464,"score":0.01714},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1793879041151,"publishedAt":1707769803768,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:1674"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:1675"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:1676"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:2763"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2024:2764"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2024-1459"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259475"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:1677"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:2763"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/errata/RHSA-2024:2764"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_REDHAT","x_transferred"],"url":"https://access.redhat.com/security/cve/CVE-2024-1459"},{"source":"ADP: CVE","tags":["issue-tracking","x_refsource_REDHAT","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259475"},{"source":"ADP: CVE","tags":[],"url":"https://security.netapp.com/advisory/ntap-20241122-0008/"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}],"revision":"8adc35de2c58a0d1e4092cc6df66afb2c522c712d0cecaff8344cddf93753ca9","sources":[{"modifiedAt":1793879041151,"name":"CNA: redhat","retrievedAt":1793880755999,"url":"https://www.cve.org/CVERecord?id=CVE-2024-1459"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793880806669,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-1459"}],"ssvc":{"assessedAt":1707839503437,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Undertow: directory traversal vulnerability","updatedAt":1793880806669}