{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://github.com/wildfly/wildfly-core","packageName":"wildfly-core","product":"","source":"CNA: redhat","vendor":"","versions":[{"lessThan":"27.0.1.Final","status":"affected","version":"0","versionType":"semver"},{"lessThan":"28.0.0.Beta2","status":"affected","version":"28.0.0.Beta1","versionType":"semver"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"org.wildfly.core/wildfly-server","product":"Red Hat JBoss Enterprise Application Platform","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"15.0.45.Final-redhat-00001","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"org.wildfly.core/wildfly-server","product":"Red Hat JBoss Enterprise Application Platform 7.4.22","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"15.0.42.Final-redhat-00001","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.21-3.GA_29548_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.21-3.GA_29548_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-netty-transport-native-epoll","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.1.119-1.Final_redhat_00004.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap7-wildfly","product":"Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:7.4.21-3.GA_29548_redhat_00001.1.el7eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat JBoss Enterprise Application Platform 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-apache-commons-io","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.16.1-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.80.0-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:800.7.0-2.GA_redhat_00002.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-hibernate","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.2.35-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-ironjacamar","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.13-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jakarta-enterprise-concurrent","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.1-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jsf-impl","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.11-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-reactive-streams","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.4-3.redhat_00004.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-reactivex-rxjava","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.1.10-1.redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-weld-core","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.1.5-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.0.7-3.GA_redhat_00004.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.9-1.Final_redhat_00001.1.el8eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-apache-commons-io","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.16.1-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-bouncycastle","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.80.0-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-eap-product-conf-parent","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:800.7.0-2.GA_redhat_00002.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-hibernate","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:6.2.35-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-ironjacamar","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.13-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jakarta-enterprise-concurrent","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.0.1-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-jsf-impl","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.0.11-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-reactive-streams","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:1.0.4-3.redhat_00004.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-reactivex-rxjava","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.1.10-1.redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-weld-core","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:5.1.5-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:8.0.7-3.GA_redhat_00004.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"eap8-wildfly-elytron","product":"Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9","source":"CNA: redhat","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:2.2.9-1.Final_redhat_00001.1.el9eap","versionType":"rpm"}]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat Build of Keycloak","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat Data Grid 8","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat Fuse 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"wildfly-server","product":"Red Hat JBoss Data Grid 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"wildfly-server","product":"Red Hat JBoss Enterprise Application Platform 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","packageName":"wildfly-server","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat Process Automation 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unknown","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"wildfly-server","product":"Red Hat Single Sign-On 7","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"org.wildfly.core:wildfly-server","product":"org.wildfly.core:wildfly-server","source":"OSV GHSA-qr6x-62gq-4ccp","vendor":"","versions":[{"status":"affected","version":"1.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha10","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha11","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha12","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha13","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha14","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha15","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha16","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha17","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha18","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha19","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha6","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha7","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha8","versionType":"Maven"},{"status":"affected","version":"1.0.0.Alpha9","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"1.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR2","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR3","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR4","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR5","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR6","versionType":"Maven"},{"status":"affected","version":"1.0.0.CR7","versionType":"Maven"},{"status":"affected","version":"1.0.0.Final","versionType":"Maven"},{"status":"affected","version":"1.0.1.Final","versionType":"Maven"},{"status":"affected","version":"1.0.2.Final","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta8","versionType":"Maven"},{"status":"affected","version":"10.0.0.Beta9","versionType":"Maven"},{"status":"affected","version":"10.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"10.0.0.Final","versionType":"Maven"},{"status":"affected","version":"10.0.2.Final","versionType":"Maven"},{"status":"affected","version":"10.0.3.Final","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta10","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta8","versionType":"Maven"},{"status":"affected","version":"11.0.0.Beta9","versionType":"Maven"},{"status":"affected","version":"11.0.0.Final","versionType":"Maven"},{"status":"affected","version":"11.1.0.Final","versionType":"Maven"},{"status":"affected","version":"11.1.1.Final","versionType":"Maven"},{"status":"affected","version":"12.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"12.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"12.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"12.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"12.0.0.Final","versionType":"Maven"},{"status":"affected","version":"12.0.1.Final","versionType":"Maven"},{"status":"affected","version":"12.0.3.Final","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"13.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"13.0.0.Final","versionType":"Maven"},{"status":"affected","version":"13.0.1.Final","versionType":"Maven"},{"status":"affected","version":"13.0.2.Final","versionType":"Maven"},{"status":"affected","version":"13.0.3.Final","versionType":"Maven"},{"status":"affected","version":"14.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"14.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"14.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"14.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"14.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"14.0.0.Final","versionType":"Maven"},{"status":"affected","version":"14.0.1.Final","versionType":"Maven"},{"status":"affected","version":"15.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"15.0.0.Final","versionType":"Maven"},{"status":"affected","version":"15.0.1.Final","versionType":"Maven"},{"status":"affected","version":"16.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"16.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"16.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"16.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"16.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"16.0.0.Final","versionType":"Maven"},{"status":"affected","version":"16.0.1.Final","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"17.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"17.0.0.Final","versionType":"Maven"},{"status":"affected","version":"17.0.1.Final","versionType":"Maven"},{"status":"affected","version":"17.0.2.Final","versionType":"Maven"},{"status":"affected","version":"17.0.3.Final","versionType":"Maven"},{"status":"affected","version":"18.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"18.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"18.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"18.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"18.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"18.0.0.Final","versionType":"Maven"},{"status":"affected","version":"18.0.1.Final","versionType":"Maven"},{"status":"affected","version":"18.0.2.Final","versionType":"Maven"},{"status":"affected","version":"18.0.3.Final","versionType":"Maven"},{"status":"affected","version":"18.0.4.Final","versionType":"Maven"},{"status":"affected","version":"18.1.0.Beta1","versionType":"Maven"},{"status":"affected","version":"18.1.0.Final","versionType":"Maven"},{"status":"affected","version":"18.1.1.Final","versionType":"Maven"},{"status":"affected","version":"18.1.2.Final","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta10","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta11","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta12","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta13","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta14","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta15","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta17","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta18","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta8","versionType":"Maven"},{"status":"affected","version":"19.0.0.Beta9","versionType":"Maven"},{"status":"affected","version":"19.0.0.Final","versionType":"Maven"},{"status":"affected","version":"19.0.1.Final","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha10","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha11","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha12","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha13","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha6","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha7","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha8","versionType":"Maven"},{"status":"affected","version":"2.0.0.Alpha9","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"2.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR2","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR3","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR4","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR5","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR6","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR7","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR8","versionType":"Maven"},{"status":"affected","version":"2.0.0.CR9","versionType":"Maven"},{"status":"affected","version":"2.0.0.Final","versionType":"Maven"},{"status":"affected","version":"2.0.1.Final","versionType":"Maven"},{"status":"affected","version":"2.0.10.Final","versionType":"Maven"},{"status":"affected","version":"2.0.2.Final","versionType":"Maven"},{"status":"affected","version":"2.0.3.Final","versionType":"Maven"},{"status":"affected","version":"2.0.4.Final","versionType":"Maven"},{"status":"affected","version":"2.0.5.CR1","versionType":"Maven"},{"status":"affected","version":"2.0.5.Final","versionType":"Maven"},{"status":"affected","version":"2.0.6.Final","versionType":"Maven"},{"status":"affected","version":"2.0.7.Final","versionType":"Maven"},{"status":"affected","version":"2.0.8.Final","versionType":"Maven"},{"status":"affected","version":"2.0.9.Final","versionType":"Maven"},{"status":"affected","version":"2.1.0.CR1","versionType":"Maven"},{"status":"affected","version":"2.1.0.CR2","versionType":"Maven"},{"status":"affected","version":"2.1.0.Final","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR1","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR2","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR3","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR4","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR5","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR6","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR7","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR8","versionType":"Maven"},{"status":"affected","version":"2.2.0.CR9","versionType":"Maven"},{"status":"affected","version":"2.2.0.Final","versionType":"Maven"},{"status":"affected","version":"2.2.1.CR1","versionType":"Maven"},{"status":"affected","version":"2.2.1.CR2","versionType":"Maven"},{"status":"affected","version":"2.2.1.Final","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"20.0.0.Beta8","versionType":"Maven"},{"status":"affected","version":"20.0.0.Final","versionType":"Maven"},{"status":"affected","version":"20.0.1.Final","versionType":"Maven"},{"status":"affected","version":"20.0.2.Final","versionType":"Maven"},{"status":"affected","version":"21.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"21.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"21.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"21.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"21.1.0.Beta1","versionType":"Maven"},{"status":"affected","version":"21.1.0.Beta2","versionType":"Maven"},{"status":"affected","version":"21.1.0.Final","versionType":"Maven"},{"status":"affected","version":"21.1.1.Final","versionType":"Maven"},{"status":"affected","version":"22.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"22.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"22.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"22.0.0.Final","versionType":"Maven"},{"status":"affected","version":"22.0.1.Final","versionType":"Maven"},{"status":"affected","version":"22.0.2.Final","versionType":"Maven"},{"status":"affected","version":"23.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"23.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"23.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"23.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"23.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"23.0.0.Final","versionType":"Maven"},{"status":"affected","version":"23.0.1.Final","versionType":"Maven"},{"status":"affected","version":"23.0.2.Final","versionType":"Maven"},{"status":"affected","version":"23.0.3.Final","versionType":"Maven"},{"status":"affected","version":"24.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"24.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"24.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"24.0.0.Final","versionType":"Maven"},{"status":"affected","version":"24.0.1.Final","versionType":"Maven"},{"status":"affected","version":"25.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"25.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"25.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"25.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"25.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"25.0.0.Final","versionType":"Maven"},{"status":"affected","version":"25.0.1.Final","versionType":"Maven"},{"status":"affected","version":"25.0.2.Final","versionType":"Maven"},{"status":"affected","version":"26.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"26.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"26.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"26.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"26.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"26.0.0.Final","versionType":"Maven"},{"status":"affected","version":"26.0.1.Final","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"27.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"27.0.0.Final","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha10","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha11","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha12","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha13","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha14","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha15","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha16","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha17","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha18","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha19","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha20","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha21","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha22","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha23","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha24","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha25","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha6","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha7","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha8","versionType":"Maven"},{"status":"affected","version":"3.0.0.Alpha9","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta10","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta11","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta12","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta13","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta14","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta15","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta16","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta17","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta18","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta19","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta20","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta21","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta22","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta23","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta24","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta25","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta26","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta27","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta28","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta29","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta30","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta31","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta8","versionType":"Maven"},{"status":"affected","version":"3.0.0.Beta9","versionType":"Maven"},{"status":"affected","version":"3.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"3.0.0.Final","versionType":"Maven"},{"status":"affected","version":"3.0.1.Final","versionType":"Maven"},{"status":"affected","version":"3.0.10.Final","versionType":"Maven"},{"status":"affected","version":"3.0.2.CR1","versionType":"Maven"},{"status":"affected","version":"3.0.2.Final","versionType":"Maven"},{"status":"affected","version":"3.0.3.Final","versionType":"Maven"},{"status":"affected","version":"3.0.4.Final","versionType":"Maven"},{"status":"affected","version":"3.0.5.Final","versionType":"Maven"},{"status":"affected","version":"3.0.6.Final","versionType":"Maven"},{"status":"affected","version":"3.0.7.Final","versionType":"Maven"},{"status":"affected","version":"3.0.8.Final","versionType":"Maven"},{"status":"affected","version":"3.0.9.Final","versionType":"Maven"},{"status":"affected","version":"3.1.0.Final","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha10","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha6","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha7","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha8","versionType":"Maven"},{"status":"affected","version":"4.0.0.Alpha9","versionType":"Maven"},{"status":"affected","version":"4.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"4.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"4.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"4.0.0.Final","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha6","versionType":"Maven"},{"status":"affected","version":"5.0.0.Alpha7","versionType":"Maven"},{"status":"affected","version":"5.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"5.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"5.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"5.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"5.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"5.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"5.0.0.Final","versionType":"Maven"},{"status":"affected","version":"6.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"6.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"6.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"6.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"6.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"6.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"6.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"6.0.0.CR2","versionType":"Maven"},{"status":"affected","version":"6.0.0.CR3","versionType":"Maven"},{"status":"affected","version":"6.0.0.CR4","versionType":"Maven"},{"status":"affected","version":"6.0.0.Final","versionType":"Maven"},{"status":"affected","version":"6.0.1.Final","versionType":"Maven"},{"status":"affected","version":"6.0.2.Final","versionType":"Maven"},{"status":"affected","version":"7.0.0.Alpha1","versionType":"Maven"},{"status":"affected","version":"7.0.0.Alpha2","versionType":"Maven"},{"status":"affected","version":"7.0.0.Alpha3","versionType":"Maven"},{"status":"affected","version":"7.0.0.Alpha4","versionType":"Maven"},{"status":"affected","version":"7.0.0.Alpha5","versionType":"Maven"},{"status":"affected","version":"7.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"7.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"7.0.0.Final","versionType":"Maven"},{"status":"affected","version":"8.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"8.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"8.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"8.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"8.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"8.0.0.CR1","versionType":"Maven"},{"status":"affected","version":"8.0.0.Final","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta1","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta2","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta3","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta4","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta5","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta6","versionType":"Maven"},{"status":"affected","version":"9.0.0.Beta7","versionType":"Maven"},{"status":"affected","version":"9.0.0.Final","versionType":"Maven"},{"status":"affected","version":"9.0.1.Final","versionType":"Maven"},{"status":"affected","version":"9.0.2.Final","versionType":"Maven"},{"events":[{"introduced":"0"},{"fixed":"27.0.1.Final"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"org.wildfly.core:wildfly-server","product":"org.wildfly.core:wildfly-server","source":"OSV GHSA-qr6x-62gq-4ccp","vendor":"","versions":[{"status":"affected","version":"28.0.0.Beta1","versionType":"Maven"},{"events":[{"introduced":"28.0.0.Beta1"},{"fixed":"28.0.0.Beta2"}],"status":"unknown","version":"28.0.0.Beta1","versionType":"ECOSYSTEM"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*","versionEndExcluding":"7.4.21","versionStartIncluding":"7.4","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*","versionEndExcluding":"8.0.7","versionStartIncluding":"8.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:wildfly:*:*:*:*:*:*:*:*","versionEndExcluding":"27.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:redhat:wildfly:28.0.0:beta1:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2025-23367","cwes":["CWE-284"],"description":"A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. \nThe vulnerability is caused by the Suspend and Resume handlers not performing authorization checks to validate whether the current user has the required permissions to proceed with the action.","epss":{"date":"2026-11-06","percentile":0.55755,"score":0.00769},"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794027707732,"publishedAt":1738247404227,"references":[{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:3465"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:3467"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:3989"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:3990"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:3992"},{"source":"CNA: redhat","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:4552"},{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2025-23367"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337620"},{"source":"CNA: redhat","tags":[],"url":"https://github.com/advisories/GHSA-qr6x-62gq-4ccp"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2025:3465"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://access.redhat.com/errata/RHSA-2025:3467"},{"source":"secalert@redhat.com","tags":["Issue Tracking"],"url":"https://access.redhat.com/errata/RHSA-2025:3989"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2025:3990"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2025:3992"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/errata/RHSA-2025:4552"},{"source":"secalert@redhat.com","tags":["Vendor Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2025-23367"},{"source":"secalert@redhat.com","tags":["Vendor Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337620"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://github.com/advisories/GHSA-qr6x-62gq-4ccp"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-qr6x-62gq-4ccp"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-qr6x-62gq-4ccp"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."},{"kind":"fix","source":"OSV GHSA-qr6x-62gq-4ccp","text":"org.wildfly.core:wildfly-server (Maven): OSV reports a fixed version 27.0.1.Final. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-qr6x-62gq-4ccp"},{"kind":"fix","source":"OSV GHSA-qr6x-62gq-4ccp","text":"org.wildfly.core:wildfly-server (Maven): OSV reports a fixed version 28.0.0.Beta2. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-qr6x-62gq-4ccp"}],"revision":"3570e8c9bbb544e3b0beb5aa605c742352404aacdd85e12ddbd175756f72a628","sources":[{"modifiedAt":1794027707732,"name":"CNA: redhat","retrievedAt":1794028106809,"url":"https://www.cve.org/CVERecord?id=CVE-2025-23367"},{"modifiedAt":1793895434193,"name":"NVD","retrievedAt":1793902586582,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23367"},{"modifiedAt":1765224455085,"name":"OSV / GitHub Security Advisories","retrievedAt":1793895172893,"url":"https://osv.dev/vulnerability/GHSA-qr6x-62gq-4ccp"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794028125702,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-23367"}],"ssvc":{"assessedAt":1738248895951,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Org.wildfly.core:wildfly-server: wildfly improper rbac permission","updatedAt":1794028125702}