Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-5598 (GCVE-0-2026-5598)
Vulnerability from cvelistv5 – Published: 2026-04-15 09:05 – Updated: 2026-08-12 12:04
VLAI
EPSS
VEX
Title
Non-constant time comparisons risk private key leakage in FrodoKEM.
Summary
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).
This vulnerability is associated with program files FrodoEngine.Java.
This issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-15 13:11 UTC
Assigner
References
13 references
Impacted products
45 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Legion of the Bouncy Castle Inc. | BC-JAVA |
Affected:
1.71 , < 1.80.2
(maven)
Affected: 1.81 , < 1.81.1 (maven) Affected: 1.82 , < 1.84 (maven) |
guessed | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 |
cpe:/a:redhat:jboss_enterprise_application_platform:7.4
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4.25 |
cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:1.84.0-1.redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.16.0-22.redhat_00057.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.3.14-11.SP11_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:1.5.26-2.Final_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.18.8-1.redhat_00003.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:5.0.31-3.SP2_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:1.10.0-46.Final_redhat_00044.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:4.1.135-1.Final_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.5.5-30.SP12_redhat_00020.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.5.5-24.SP12_redhat_00016.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:2.2.40-2.SP3_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 |
Unaffected:
0:7.4.25-2.GA_redhat_00001.1.el7eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 |
Unaffected:
0:1.84.0-1.redhat_00001.1.el8eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 |
Unaffected:
0:1.84.0-1.redhat_00001.1.el9eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 |
cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 |
Unaffected:
0:1.84.0-1.redhat_00001.1.el8eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8 |
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 |
Unaffected:
0:1.84.0-1.redhat_00001.1.el9eap , < *
(rpm)
cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9 |
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7
|
||
| Red Hat | Red Hat AMQ Clients |
cpe:/a:redhat:amq_clients:2023
|
||
| Red Hat | Red Hat build of Apache Camel 4 for Quarkus 3 |
cpe:/a:redhat:camel_quarkus:3
|
||
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4
|
||
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3
|
||
| Red Hat | Red Hat build of Debezium 2 |
cpe:/a:redhat:debezium:2
|
||
| Red Hat | Red Hat build of Debezium 3 |
cpe:/a:redhat:debezium:3
|
||
| Red Hat | Red Hat Build of Keycloak |
cpe:/a:redhat:build_keycloak:
|
||
| Red Hat | Red Hat build of Quarkus |
cpe:/a:redhat:quarkus:3
|
||
| Red Hat | Red Hat Data Grid 8 |
cpe:/a:redhat:jboss_data_grid:8
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 |
cpe:/a:redhat:jboss_enterprise_application_platform:7
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8
|
||
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack |
cpe:/a:redhat:jbosseapxp
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat Process Automation 7 |
cpe:/a:redhat:jboss_enterprise_bpms_platform:7
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Single Sign-On 7 |
cpe:/a:redhat:red_hat_single_sign_on:7
|
||
| Red Hat | streams for Apache Kafka 2 |
cpe:/a:redhat:amq_streams:2
|
||
| Red Hat | streams for Apache Kafka 3 |
cpe:/a:redhat:amq_streams:3
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-5598",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-15T13:11:48.318645Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-15T13:11:53.444Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7.4"
],
"defaultStatus": "unaffected",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk12",
"product": "Red Hat JBoss Enterprise Application Platform 7.4.25",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15",
"product": "Red Hat JBoss Enterprise Application Platform 7.4.25",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-bouncycastle",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.84.0-1.redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-activemq-artemis",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.16.0-22.redhat_00057.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-glassfish-jsf",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.3.14-11.SP11_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-ironjacamar",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.5.26-2.Final_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-annotations",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-core",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-databind",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-jaxrs-providers",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-modules-base",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jackson-modules-java8",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.18.8-1.redhat_00003.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jboss-remoting",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:5.0.31-3.SP2_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-jboss-server-migration",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.10.0-46.Final_redhat_00044.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-netty",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.1.135-1.Final_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-netty-transport-native-epoll",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.1.135-1.Final_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-picketlink-bindings",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.5-30.SP12_redhat_00020.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-picketlink-federation",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.5-24.SP12_redhat_00016.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-undertow",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.2.40-2.SP3_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7"
],
"defaultStatus": "affected",
"packageName": "eap7-wildfly",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:7.4.25-2.GA_redhat_00001.1.el7eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8"
],
"defaultStatus": "affected",
"packageName": "eap7-bouncycastle",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.84.0-1.redhat_00001.1.el8eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9"
],
"defaultStatus": "affected",
"packageName": "eap7-bouncycastle",
"product": "Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.84.0-1.redhat_00001.1.el9eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk12",
"product": "Red Hat JBoss Enterprise Application Platform 8.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8"
],
"defaultStatus": "affected",
"packageName": "eap8-bouncycastle",
"product": "Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.84.0-1.redhat_00001.1.el8eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "eap8-bouncycastle",
"product": "Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.84.0-1.redhat_00001.1.el9eap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "jenkins",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "jenkins-2-plugins",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "ocp-tools-4/jenkins-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_clients:2023"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat AMQ Clients",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_quarkus:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat build of Apache Camel 4 for Quarkus 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-debug-jdk15on",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-lts8on",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-lts8on",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:debezium:2"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk15on",
"product": "Red Hat build of Debezium 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:debezium:2"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat build of Debezium 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:debezium:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk15on",
"product": "Red Hat build of Debezium 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:debezium:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat build of Debezium 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:debezium:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-lts8on",
"product": "Red Hat build of Debezium 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat Build of Keycloak",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quarkus:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat build of Quarkus",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15to18",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat Data Grid 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "pki-core:10.6/resteasy",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "pki-deps:10.6/resteasy",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "jmc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "resteasy",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-debug-jdk18on",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk15on",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk18on",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "bcprov-jdk15",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15to18",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk16",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat JBoss Enterprise Application Platform 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk15on",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk18on",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15to18",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk15on",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-ext-jdk18on",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk12",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15to18",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jbosseapxp"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on-1.83.0.redhat-00001.jar",
"product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-modelmesh-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-modelmesh-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/openvsx-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/pluginregistry-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat Process Automation 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_bpms_platform:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15to18",
"product": "Red Hat Process Automation 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "candlepin",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite:el8/candlepin",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "Red Hat Single Sign-On 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "streams for Apache Kafka 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "streams for Apache Kafka 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk15on",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3"
],
"defaultStatus": "unaffected",
"packageName": "bcprov-jdk18on",
"product": "streams for Apache Kafka 3",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-15T09:05:56.277Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy to gain unauthorized access to sensitive cryptographic information."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-385",
"description": "Covert Timing Channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-12T12:04:36.805Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-5598"
},
{
"name": "RHBZ#2458635",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458635"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12267"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18054"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12269"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53806"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18059"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:53644: Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server"
},
{
"lang": "en",
"value": "RHSA-2026:12267: Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server, Red Hat JBoss EAP 7.4 ELS for RHEL 8, Red Hat JBoss EAP 7.4 ELS for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:18054: Red Hat JBoss EAP 8.1 for RHEL 8"
},
{
"lang": "en",
"value": "RHSA-2026:18055: Red Hat JBoss EAP 8.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:12269: Red Hat JBoss Enterprise Application Platform 7"
},
{
"lang": "en",
"value": "RHSA-2026:53806: Red Hat JBoss Enterprise Application Platform 7.4.25"
},
{
"lang": "en",
"value": "RHSA-2026:18059: Red Hat JBoss Enterprise Application Platform 8.1"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-15T10:01:04.531Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-15T09:05:56.277Z",
"value": "Made public."
}
],
"title": "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons",
"workarounds": [
{
"lang": "en",
"value": "To mitigate this vulnerability, implement aggressive rate limiting and anomaly detection, specifically looking for unusual, high-frequency cryptographic handshake failures or anomalous traffic patterns targeting endpoints that handle key exchanges in the network logs."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"defaultStatus": "unaffected",
"modules": [
"core"
],
"packageName": "core",
"platforms": [
"all"
],
"product": "BC-JAVA",
"programFiles": [
"FrodoEngine.java"
],
"repo": "https://github.com/bcgit/bc-java",
"vendor": "Legion of the Bouncy Castle Inc.",
"versions": [
{
"lessThan": "1.80.2",
"status": "affected",
"version": "1.71",
"versionType": "maven"
},
{
"lessThan": "1.81.1",
"status": "affected",
"version": "1.81",
"versionType": "maven"
},
{
"lessThan": "1.84",
"status": "affected",
"version": "1.82",
"versionType": "maven"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Cristina Due\u00f1as Navarro (cristina.duenas@jtsec.es)"
},
{
"lang": "en",
"type": "finder",
"value": "The Robusta team: Deepak Pillai, Anirban Chakraborty, Chitchanok Chuengsatiansup, Matthew Roughan, Peter Schwabe, and Yuval Yarom"
},
{
"lang": "en",
"type": "finder",
"value": "Sunwoo Lee and Seunghyun Yoon, Korea Institute of Energy Technology (KENTECH)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\u003cp\u003e This vulnerability is associated with program files FrodoEngine.Java.\u003c/p\u003e\u003cp\u003eThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.\u003c/p\u003e"
}
],
"value": "Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\n\n This vulnerability is associated with program files FrodoEngine.Java.\n\n\n\nThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"Safety": "PRESENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.9,
"baseSeverity": "HIGH",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "RED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-385",
"description": "CWE-385 Covert timing channel",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-28T00:51:35.895Z",
"orgId": "91579145-5d7b-4cc5-b925-a0262ff19630",
"shortName": "bcorg"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598"
},
{
"tags": [
"patch"
],
"url": "https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87"
},
{
"tags": [
"patch"
],
"url": "https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Non-constant time comparisons risk private key leakage in FrodoKEM.",
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "91579145-5d7b-4cc5-b925-a0262ff19630",
"assignerShortName": "bcorg",
"cveId": "CVE-2026-5598",
"datePublished": "2026-04-15T09:05:56.277Z",
"dateReserved": "2026-04-05T07:25:44.930Z",
"dateUpdated": "2026-08-12T12:04:36.805Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-5598",
"date": "2026-09-09",
"epss": "0.00899",
"percentile": "0.57515"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-5598\",\"sourceIdentifier\":\"91579145-5d7b-4cc5-b925-a0262ff19630\",\"published\":\"2026-04-15T10:16:49.757\",\"lastModified\":\"2026-08-12T12:19:45.847\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\\n\\n This vulnerability is associated with program files FrodoEngine.Java.\\n\\n\\n\\nThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.\"}],\"affected\":[{\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\",\"affectedData\":[{\"vendor\":\"Legion of the Bouncy Castle Inc.\",\"product\":\"BC-JAVA\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://www.bouncycastle.org/download/bouncy-castle-java/\",\"packageName\":\"core\",\"modules\":[\"core\"],\"platforms\":[\"all\"],\"programFiles\":[\"FrodoEngine.java\"],\"repo\":\"https://github.com/bcgit/bc-java\",\"versions\":[{\"version\":\"1.71\",\"lessThan\":\"1.80.2\",\"versionType\":\"maven\",\"status\":\"affected\"},{\"version\":\"1.81\",\"lessThan\":\"1.81.1\",\"versionType\":\"maven\",\"status\":\"affected\"},{\"version\":\"1.82\",\"lessThan\":\"1.84\",\"versionType\":\"maven\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4.25\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk12\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4.25\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-bouncycastle\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:1.84.0-1.redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-activemq-artemis\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.16.0-22.redhat_00057.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-glassfish-jsf\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.3.14-11.SP11_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-ironjacamar\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:1.5.26-2.Final_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-annotations\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-core\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-databind\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-jaxrs-providers\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-modules-base\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jackson-modules-java8\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.18.8-1.redhat_00003.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jboss-remoting\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:5.0.31-3.SP2_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-jboss-server-migration\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:1.10.0-46.Final_redhat_00044.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-netty\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:4.1.135-1.Final_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-netty-transport-native-epoll\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:4.1.135-1.Final_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-picketlink-bindings\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.5.5-30.SP12_redhat_00020.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-picketlink-federation\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.5.5-24.SP12_redhat_00016.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-undertow\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:2.2.40-2.SP3_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-wildfly\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"],\"versions\":[{\"version\":\"0:7.4.25-2.GA_redhat_00001.1.el7eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-bouncycastle\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"],\"versions\":[{\"version\":\"0:1.84.0-1.redhat_00001.1.el8eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap7-bouncycastle\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"],\"versions\":[{\"version\":\"0:1.84.0-1.redhat_00001.1.el9eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk12\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap8-bouncycastle\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8\"],\"versions\":[{\"version\":\"0:1.84.0-1.redhat_00001.1.el8eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"eap8-bouncycastle\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9\"],\"versions\":[{\"version\":\"0:1.84.0-1.redhat_00001.1.el9eap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jenkins\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jenkins-2-plugins\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Clients\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:amq_clients:2023\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel 4 for Quarkus 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:camel_quarkus:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-debug-jdk15on\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-lts8on\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-lts8on\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Debezium 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk15on\",\"cpes\":[\"cpe:/a:redhat:debezium:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Debezium 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:debezium:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Debezium 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk15on\",\"cpes\":[\"cpe:/a:redhat:debezium:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Debezium 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:debezium:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Debezium 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-lts8on\",\"cpes\":[\"cpe:/a:redhat:debezium:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Keycloak\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:build_keycloak:\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Quarkus\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:quarkus:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15to18\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pki-core:10.6/resteasy\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"pki-deps:10.6/resteasy\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jmc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resteasy\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-debug-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15to18\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk16\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15to18\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-ext-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk12\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15to18\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on-1.83.0.redhat-00001.jar\",\"cpes\":[\"cpe:/a:redhat:jbosseapxp\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/openvsx-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/pluginregistry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Process Automation 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Process Automation 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15to18\",\"cpes\":[\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"candlepin\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/candlepin\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Single Sign-On 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:red_hat_single_sign_on:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk15on\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"bcprov-jdk18on\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3\"]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Red\",\"baseScore\":8.9,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"UNREPORTED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"PRESENT\",\"Automatable\":\"YES\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"RED\"}}],\"cvssMetricV31\":[{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-15T13:11:48.318645Z\",\"id\":\"CVE-2026-5598\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-385\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-385\"}]}],\"references\":[{\"url\":\"https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5\",\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\"},{\"url\":\"https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87\",\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\"},{\"url\":\"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598\",\"source\":\"91579145-5d7b-4cc5-b925-a0262ff19630\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12267\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12269\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18054\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18059\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53806\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-5598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2458635\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-09-09T15:45:28+00:00",
"cve": "CVE-2026-5598",
"id": "CVE-2026-5598",
"initial_release_date": "2026-04-15T09:05:56.277000+00:00",
"product_status:fixed": "139",
"product_status:known_affected": "1",
"product_status:known_not_affected": "285",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4.25\", \"packageName\": \"bcprov-jdk12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4.25\", \"packageName\": \"bcprov-jdk15\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.84.0-1.redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-bouncycastle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.16.0-22.redhat_00057.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-activemq-artemis\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.3.14-11.SP11_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-glassfish-jsf\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.5.26-2.Final_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-ironjacamar\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-annotations\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-core\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-databind\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-jaxrs-providers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-modules-base\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jackson-modules-java8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:5.0.31-3.SP2_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jboss-remoting\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.10.0-46.Final_redhat_00044.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-jboss-server-migration\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-netty\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-netty-transport-native-epoll\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.5-30.SP12_redhat_00020.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-picketlink-bindings\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.5-24.SP12_redhat_00016.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-picketlink-federation\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.2.40-2.SP3_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-undertow\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:7.4.25-2.GA_redhat_00001.1.el7eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-wildfly\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.84.0-1.redhat_00001.1.el8eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-bouncycastle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.84.0-1.redhat_00001.1.el9eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap7-bouncycastle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8.1\", \"packageName\": \"bcprov-jdk12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.84.0-1.redhat_00001.1.el8eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap8-bouncycastle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.84.0-1.redhat_00001.1.el9eap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"eap8-bouncycastle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"jenkins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"jenkins-2-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_clients:2023\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Clients\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_quarkus:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel 4 for Quarkus 3\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"bcprov-debug-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"bcprov-lts8on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"bcprov-lts8on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:debezium:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Debezium 2\", \"packageName\": \"bcprov-ext-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:debezium:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Debezium 2\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:debezium:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Debezium 3\", \"packageName\": \"bcprov-ext-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:debezium:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Debezium 3\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:debezium:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Debezium 3\", \"packageName\": \"bcprov-lts8on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:build_keycloak:\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Keycloak\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quarkus:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Quarkus\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"bcprov-jdk15\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"bcprov-jdk15to18\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pki-core:10.6/resteasy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"pki-deps:10.6/resteasy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"jmc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"resteasy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-debug-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-ext-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-ext-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-jdk15\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-jdk15to18\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-jdk16\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 7\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-ext-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-ext-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-jdk15\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-jdk15to18\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_application_platform:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform 8\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-ext-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-ext-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk12\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk15\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk15to18\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jbosseapxp\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\", \"packageName\": \"bcprov-jdk18on-1.83.0.redhat-00001.jar\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/openvsx-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/pluginregistry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Process Automation 7\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_enterprise_bpms_platform:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Process Automation 7\", \"packageName\": \"bcprov-jdk15to18\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"candlepin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/candlepin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_single_sign_on:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Single Sign-On 7\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 2\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 2\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"packageName\": \"bcprov-jdk15on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 3\", \"packageName\": \"bcprov-jdk18on\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-15T10:01:04.531Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-15T09:05:56.277Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:53644: Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12267: Red Hat JBoss EAP 7.4 ELS for RHEL 7 Server, Red Hat JBoss EAP 7.4 ELS for RHEL 8, Red Hat JBoss EAP 7.4 ELS for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18054: Red Hat JBoss EAP 8.1 for RHEL 8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18055: Red Hat JBoss EAP 8.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12269: Red Hat JBoss Enterprise Application Platform 7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53806: Red Hat JBoss Enterprise Application Platform 7.4.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18059: Red Hat JBoss Enterprise Application Platform 8.1\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-15T09:05:56.277Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-5598\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2458635\", \"name\": \"RHBZ#2458635\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12267\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18054\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12269\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53806\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18059\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this vulnerability, implement aggressive rate limiting and anomaly detection, specifically looking for unusual, high-frequency cryptographic handshake failures or anomalous traffic patterns targeting endpoints that handle key exchanges in the network logs.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy to gain unauthorized access to sensitive cryptographic information.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-385\", \"description\": \"Covert Timing Channel\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-12T12:04:36.805Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-5598\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-15T13:11:48.318645Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-15T13:11:50.359Z\"}}], \"cna\": {\"title\": \"Non-constant time comparisons risk private key leakage in FrodoKEM.\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Cristina Due\\u00f1as Navarro (cristina.duenas@jtsec.es)\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"The Robusta team: Deepak Pillai, Anirban Chakraborty, Chitchanok Chuengsatiansup, Matthew Roughan, Peter Schwabe, and Yuval Yarom\"}, {\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Sunwoo Lee and Seunghyun Yoon, Korea Institute of Energy Technology (KENTECH)\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"PRESENT\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 8.9, \"Automatable\": \"YES\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/S:P/AU:Y/U:Red\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"RED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://github.com/bcgit/bc-java\", \"vendor\": \"Legion of the Bouncy Castle Inc.\", \"modules\": [\"core\"], \"product\": \"BC-JAVA\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.71\", \"lessThan\": \"1.80.2\", \"versionType\": \"maven\"}, {\"status\": \"affected\", \"version\": \"1.81\", \"lessThan\": \"1.81.1\", \"versionType\": \"maven\"}, {\"status\": \"affected\", \"version\": \"1.82\", \"lessThan\": \"1.84\", \"versionType\": \"maven\"}], \"platforms\": [\"all\"], \"packageName\": \"core\", \"programFiles\": [\"FrodoEngine.java\"], \"collectionURL\": \"https://www.bouncycastle.org/download/bouncy-castle-java/\", \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.1\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\\n\\n This vulnerability is associated with program files FrodoEngine.Java.\\n\\n\\n\\nThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules).\u003cp\u003e This vulnerability is associated with program files FrodoEngine.Java.\u003c/p\u003e\u003cp\u003eThis issue affects BC-JAVA: from 1.71 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-385\", \"description\": \"CWE-385 Covert timing channel\"}]}], \"providerMetadata\": {\"orgId\": \"91579145-5d7b-4cc5-b925-a0262ff19630\", \"shortName\": \"bcorg\", \"dateUpdated\": \"2026-07-28T00:51:35.895Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-5598\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-12T12:04:36.805Z\", \"dateReserved\": \"2026-04-05T07:25:44.930Z\", \"assignerOrgId\": \"91579145-5d7b-4cc5-b925-a0262ff19630\", \"datePublished\": \"2026-04-15T09:05:56.277Z\", \"assignerShortName\": \"bcorg\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
WID-SEC-W-2026-1327
Vulnerability from csaf_certbund - Published: 2026-04-29 22:00 - Updated: 2026-08-04 22:00Summary
Red Hat JBoss Enterprise Application Platform (bouncycastle): Schwachstelle ermöglicht Offenlegung von Informationen
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: JBoss Enterprise Application Platform ist eine skalierbare Plattform für Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.
Angriff: Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme: - Linux
Affected products
Known affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM SPSS Modeler
IBM / SPSS
|
cpe:/a:ibm:spss:modeler
|
Modeler | |
|
Red Hat JBoss Enterprise Application Platform 7.4.24
Red Hat / JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:7.4.24
|
7.4.24 | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
Red Hat JBoss Enterprise Application Platform 7.4
Red Hat / JBoss Enterprise Application Platform
|
cpe:/a:redhat:jboss_enterprise_application_platform:7.4
|
7.4 | |
|
IBM QRadar SIEM
IBM
|
cpe:/a:ibm:qradar_siem:-
|
— | |
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:-
|
— | |
|
IBM MQ
IBM
|
cpe:/a:ibm:mq:-
|
— | |
|
IBM DB2
IBM
|
cpe:/a:ibm:db2:-
|
— |
References
13 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "JBoss Enterprise Application Platform ist eine skalierbare Plattform f\u00fcr Java-Anwendungen, inklusive JBoss Application Server, JBoss Hibernate und Boss Seam.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1327 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1327.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1327 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1327"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:12267 vom 2026-04-29",
"url": "https://access.redhat.com/errata/RHSA-2026:12267"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:12267 vom 2026-04-29",
"url": "https://access.redhat.com/errata/RHSA-2026:12269"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7273145 vom 2026-05-15",
"url": "https://www.ibm.com/support/pages/node/7273145"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:18054 vom 2026-05-18",
"url": "https://access.redhat.com/errata/RHSA-2026:18054"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:18059 vom 2026-05-18",
"url": "https://access.redhat.com/errata/RHSA-2026:18059"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:18055 vom 2026-05-18",
"url": "https://access.redhat.com/errata/RHSA-2026:18055"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277422 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277422"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7278326 vom 2026-06-29",
"url": "https://www.ibm.com/support/pages/node/7278326"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7279712 vom 2026-07-10",
"url": "https://www.ibm.com/support/pages/node/7279712"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7280950 vom 2026-07-23",
"url": "https://www.ibm.com/support/pages/node/7280950"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7282596 vom 2026-08-05",
"url": "https://www.ibm.com/support/pages/node/7282596"
}
],
"source_lang": "en-US",
"title": "Red Hat JBoss Enterprise Application Platform (bouncycastle): Schwachstelle erm\u00f6glicht Offenlegung von Informationen",
"tracking": {
"current_release_date": "2026-08-04T22:00:00.000+00:00",
"generator": {
"date": "2026-08-05T09:01:46.067+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1327",
"initial_release_date": "2026-04-29T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-04-29T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-05-17T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-05-18T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-23T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-06-28T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-07-09T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-07-23T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-08-04T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "8"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM App Connect Enterprise",
"product": {
"name": "IBM App Connect Enterprise",
"product_id": "T051349",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:-"
}
}
},
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T053688",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:-"
}
}
},
{
"category": "product_name",
"name": "IBM DB2",
"product": {
"name": "IBM DB2",
"product_id": "T048379",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:db2:-"
}
}
},
{
"category": "product_name",
"name": "IBM MQ",
"product": {
"name": "IBM MQ",
"product_id": "T021398",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:-"
}
}
},
{
"category": "product_name",
"name": "IBM QRadar SIEM",
"product": {
"name": "IBM QRadar SIEM",
"product_id": "T021415",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:qradar_siem:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "Modeler",
"product": {
"name": "IBM SPSS Modeler",
"product_id": "T018587",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:spss:modeler"
}
}
}
],
"category": "product_name",
"name": "SPSS"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "7.4",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.4",
"product_id": "978052",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4"
}
}
},
{
"category": "product_version",
"name": "7.4.24",
"product": {
"name": "Red Hat JBoss Enterprise Application Platform 7.4.24",
"product_id": "T053460",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7.4.24"
}
}
}
],
"category": "product_name",
"name": "JBoss Enterprise Application Platform"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-5598",
"product_status": {
"known_affected": [
"T018587",
"T053460",
"67646",
"T051349",
"978052",
"T021415",
"T053688",
"T021398",
"T048379"
]
},
"release_date": "2026-04-29T22:00:00.000+00:00",
"title": "CVE-2026-5598"
}
]
}
WID-SEC-W-2026-1608
Vulnerability from csaf_certbund - Published: 2026-05-19 22:00 - Updated: 2026-05-20 22:00Summary
Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.
Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.
Confluence ist eine kommerzielle Wiki-Software.
Crucible ist eine Code-Review-Lösung für Unternehmensteams.
Fisheye ist ein Quellcode-Repository-Browser für Unternehmensteams.
Jira ist eine Webanwendung zur Softwareentwicklung.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence, Atlassian Crucible, Atlassian Fisheye und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme: - Linux
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Atlassian Bamboo Data Center LTS <12.1.7
Atlassian / Bamboo
|
Data Center LTS <12.1.7 | ||
|
Atlassian Jira Data Center LTS <10.3.20
Atlassian / Jira
|
Data Center LTS <10.3.20 | ||
|
Atlassian Jira Data Center LTS <11.3.5
Atlassian / Jira
|
Data Center LTS <11.3.5 | ||
|
Atlassian Fisheye <4.9.10
Atlassian / Fisheye
|
<4.9.10 | ||
|
Atlassian Crucible <4.9.10
Atlassian / Crucible
|
<4.9.10 | ||
|
Atlassian Confluence Data Center LTS <9.2.20
Atlassian / Confluence
|
Data Center LTS <9.2.20 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence Data Center LTS <10.2.11
Atlassian / Confluence
|
Data Center LTS <10.2.11 | ||
|
Atlassian Bitbucket Data Center LTS <9.4.19
Atlassian / Bitbucket
|
Data Center LTS <9.4.19 | ||
|
Atlassian Bitbucket Data Center LTS <10.2.2
Atlassian / Bitbucket
|
Data Center LTS <10.2.2 | ||
|
Atlassian Bamboo Data Center LTS <9.6.26
Atlassian / Bamboo
|
Data Center LTS <9.6.26 | ||
|
Atlassian Bamboo Data Center LTS <10.2.19
Atlassian / Bamboo
|
Data Center LTS <10.2.19 | ||
|
Atlassian Jira LTS <9.12.35
Atlassian / Jira
|
LTS <9.12.35 |
References
4 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.\r\nBitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.\r\nConfluence ist eine kommerzielle Wiki-Software.\r\nCrucible ist eine Code-Review-L\u00f6sung f\u00fcr Unternehmensteams.\r\nFisheye ist ein Quellcode-Repository-Browser f\u00fcr Unternehmensteams. \r\nJira ist eine Webanwendung zur Softwareentwicklung.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Atlassian Bitbucket, Atlassian Confluence, Atlassian Crucible, Atlassian Fisheye und Atlassian Jira ausnutzen, um beliebigen Programmcode auszuf\u00fchren, um einen Denial of Service Angriff durchzuf\u00fchren, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, und um Sicherheitsvorkehrungen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1608 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1608.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1608 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1608"
},
{
"category": "external",
"summary": "Atlassian Security Bulletin Mai vom 2026-05-19",
"url": "https://confluence.atlassian.com/security/security-bulletin-may-19-2026-1786839142.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19098 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:19098"
}
],
"source_lang": "en-US",
"title": "Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-05-20T22:00:00.000+00:00",
"generator": {
"date": "2026-05-21T07:35:45.292+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1608",
"initial_release_date": "2026-05-19T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-05-19T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-05-20T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Data Center LTS \u003c12.1.7",
"product": {
"name": "Atlassian Bamboo Data Center LTS \u003c12.1.7",
"product_id": "T054387"
}
},
{
"category": "product_version",
"name": "Data Center LTS 12.1.7",
"product": {
"name": "Atlassian Bamboo Data Center LTS 12.1.7",
"product_id": "T054387-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:data_center_lts__12.1.7"
}
}
},
{
"category": "product_version_range",
"name": "Data Center LTS \u003c10.2.19",
"product": {
"name": "Atlassian Bamboo Data Center LTS \u003c10.2.19",
"product_id": "T054388"
}
},
{
"category": "product_version",
"name": "Data Center LTS 10.2.19",
"product": {
"name": "Atlassian Bamboo Data Center LTS 10.2.19",
"product_id": "T054388-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:data_center_lts__10.2.19"
}
}
},
{
"category": "product_version_range",
"name": "Data Center LTS \u003c9.6.26",
"product": {
"name": "Atlassian Bamboo Data Center LTS \u003c9.6.26",
"product_id": "T054389"
}
},
{
"category": "product_version",
"name": "Data Center LTS 9.6.26",
"product": {
"name": "Atlassian Bamboo Data Center LTS 9.6.26",
"product_id": "T054389-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:data_center_lts__9.6.26"
}
}
}
],
"category": "product_name",
"name": "Bamboo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "Data Center LTS \u003c10.2.2",
"product": {
"name": "Atlassian Bitbucket Data Center LTS \u003c10.2.2",
"product_id": "T054391"
}
},
{
"category": "product_version",
"name": "Data Center LTS 10.2.2",
"product": {
"name": "Atlassian Bitbucket Data Center LTS 10.2.2",
"product_id": "T054391-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:data_center_lts__10.2.2"
}
}
},
{
"category": "product_version_range",
"name": "Data Center LTS \u003c9.4.19",
"product": {
"name": "Atlassian Bitbucket Data Center LTS \u003c9.4.19",
"product_id": "T054392"
}
},
{
"category": "product_version",
"name": "Data Center LTS 9.4.19",
"product": {
"name": "Atlassian Bitbucket Data Center LTS 9.4.19",
"product_id": "T054392-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:data_center_lts__9.4.19"
}
}
}
],
"category": "product_name",
"name": "Bitbucket"
},
{
"branches": [
{
"category": "product_version_range",
"name": "Data Center LTS \u003c10.2.11",
"product": {
"name": "Atlassian Confluence Data Center LTS \u003c10.2.11",
"product_id": "T054393"
}
},
{
"category": "product_version",
"name": "Data Center LTS 10.2.11",
"product": {
"name": "Atlassian Confluence Data Center LTS 10.2.11",
"product_id": "T054393-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:data_center_lts__10.2.11"
}
}
},
{
"category": "product_version_range",
"name": "Data Center LTS \u003c9.2.20",
"product": {
"name": "Atlassian Confluence Data Center LTS \u003c9.2.20",
"product_id": "T054394"
}
},
{
"category": "product_version",
"name": "Data Center LTS 9.2.20",
"product": {
"name": "Atlassian Confluence Data Center LTS 9.2.20",
"product_id": "T054394-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:data_center_lts__9.2.20"
}
}
}
],
"category": "product_name",
"name": "Confluence"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.10",
"product": {
"name": "Atlassian Crucible \u003c4.9.10",
"product_id": "T054395"
}
},
{
"category": "product_version",
"name": "4.9.10",
"product": {
"name": "Atlassian Crucible 4.9.10",
"product_id": "T054395-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:crucible:4.9.10"
}
}
}
],
"category": "product_name",
"name": "Crucible"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.10",
"product": {
"name": "Atlassian Fisheye \u003c4.9.10",
"product_id": "T054396"
}
},
{
"category": "product_version",
"name": "4.9.10",
"product": {
"name": "Atlassian Fisheye 4.9.10",
"product_id": "T054396-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:fisheye:4.9.10"
}
}
}
],
"category": "product_name",
"name": "Fisheye"
},
{
"branches": [
{
"category": "product_version_range",
"name": "Data Center LTS \u003c11.3.5",
"product": {
"name": "Atlassian Jira Data Center LTS \u003c11.3.5",
"product_id": "T054397"
}
},
{
"category": "product_version",
"name": "Data Center LTS 11.3.5",
"product": {
"name": "Atlassian Jira Data Center LTS 11.3.5",
"product_id": "T054397-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:data_center_lts__11.3.5"
}
}
},
{
"category": "product_version_range",
"name": "Data Center LTS \u003c10.3.20",
"product": {
"name": "Atlassian Jira Data Center LTS \u003c10.3.20",
"product_id": "T054398"
}
},
{
"category": "product_version",
"name": "Data Center LTS 10.3.20",
"product": {
"name": "Atlassian Jira Data Center LTS 10.3.20",
"product_id": "T054398-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:data_center_lts__10.3.20"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c9.12.35",
"product": {
"name": "Atlassian Jira LTS \u003c9.12.35",
"product_id": "T054399"
}
},
{
"category": "product_version",
"name": "LTS 9.12.35",
"product": {
"name": "Atlassian Jira LTS 9.12.35",
"product_id": "T054399-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:lts__9.12.35"
}
}
}
],
"category": "product_name",
"name": "Jira"
}
],
"category": "vendor",
"name": "Atlassian"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-13990",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2019-13990"
},
{
"cve": "CVE-2022-1471",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2022-1471"
},
{
"cve": "CVE-2022-23521",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2022-23521"
},
{
"cve": "CVE-2022-41903",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2022-41903"
},
{
"cve": "CVE-2023-22518",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-22518"
},
{
"cve": "CVE-2023-22522",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-22522"
},
{
"cve": "CVE-2023-22523",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-22523"
},
{
"cve": "CVE-2023-22524",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-22524"
},
{
"cve": "CVE-2023-22527",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-22527"
},
{
"cve": "CVE-2023-24998",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-24998"
},
{
"cve": "CVE-2023-46604",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2023-46604"
},
{
"cve": "CVE-2024-45801",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2024-45801"
},
{
"cve": "CVE-2025-52999",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2025-52999"
},
{
"cve": "CVE-2025-67030",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2025-67030"
},
{
"cve": "CVE-2026-22029",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-22029"
},
{
"cve": "CVE-2026-22732",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-22732"
},
{
"cve": "CVE-2026-24734",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-24734"
},
{
"cve": "CVE-2026-24880",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-24880"
},
{
"cve": "CVE-2026-25639",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-25639"
},
{
"cve": "CVE-2026-26960",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-26960"
},
{
"cve": "CVE-2026-27727",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-27727"
},
{
"cve": "CVE-2026-27830",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-27830"
},
{
"cve": "CVE-2026-29062",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-29062"
},
{
"cve": "CVE-2026-29129",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-29129"
},
{
"cve": "CVE-2026-29145",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-29145"
},
{
"cve": "CVE-2026-29146",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-29146"
},
{
"cve": "CVE-2026-29786",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-29786"
},
{
"cve": "CVE-2026-31802",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-31802"
},
{
"cve": "CVE-2026-33750",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-33750"
},
{
"cve": "CVE-2026-34483",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-34483"
},
{
"cve": "CVE-2026-34487",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-34487"
},
{
"cve": "CVE-2026-39304",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-39304"
},
{
"cve": "CVE-2026-42198",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-42198"
},
{
"cve": "CVE-2026-5598",
"product_status": {
"known_affected": [
"T054387",
"T054398",
"T054397",
"T054396",
"T054395",
"T054394",
"67646",
"T054393",
"T054392",
"T054391",
"T054389",
"T054388",
"T054399"
]
},
"release_date": "2026-05-19T22:00:00.000+00:00",
"title": "CVE-2026-5598"
}
]
}
WID-SEC-W-2026-2460
Vulnerability from csaf_certbund - Published: 2026-07-21 22:00 - Updated: 2026-08-31 22:00Summary
Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.
Bitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.
Confluence ist eine kommerzielle Wiki-Software.
Fisheye ist ein Quellcode-Repository-Browser für Unternehmensteams.
Crucible ist eine Code-Review-Lösung für Unternehmensteams.
Jira ist eine Webanwendung zur Softwareentwicklung.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme: - Sonstiges
- UNIX
- Windows
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
Affected products
Known affected
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Atlassian Bitbucket LTS <10.3.2
Atlassian / Bitbucket
|
LTS <10.3.2 | ||
|
Atlassian Bitbucket LTS <9.4.22
Atlassian / Bitbucket
|
LTS <9.4.22 | ||
|
Atlassian Confluence LTS <10.2.14
Atlassian / Confluence
|
LTS <10.2.14 | ||
|
Dell Secure Connect Gateway <5.36.00.16
Dell / Secure Connect Gateway
|
<5.36.00.16 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Atlassian Confluence LTS <9.2.22
Atlassian / Confluence
|
LTS <9.2.22 | ||
|
Atlassian Fisheye <4.9.12
Atlassian / Fisheye
|
<4.9.12 | ||
|
Atlassian Crucible <4.9.12
Atlassian / Crucible
|
<4.9.12 | ||
|
Atlassian Jira LTS <11.3.8
Atlassian / Jira
|
LTS <11.3.8 | ||
|
Atlassian Jira LTS <10.3.23
Atlassian / Jira
|
LTS <10.3.23 | ||
|
Atlassian Bamboo LTS <12.1.9
Atlassian / Bamboo
|
LTS <12.1.9 | ||
|
Atlassian Bamboo LTS <10.2.21
Atlassian / Bamboo
|
LTS <10.2.21 |
References
18 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Bamboo ist ein Werkzeug zur kontinuierlichen Integration und Bereitstellung, das automatisierte Builds, Tests und Freigaben in einem einzigen Arbeitsablauf verbindet.\r\nBitbucket ist ein Git-Server zur Sourcecode-Versionskontrolle.\r\nConfluence ist eine kommerzielle Wiki-Software.\r\nFisheye ist ein Quellcode-Repository-Browser f\u00fcr Unternehmensteams. \r\nCrucible ist eine Code-Review-L\u00f6sung f\u00fcr Unternehmensteams.\r\nJira ist eine Webanwendung zur Softwareentwicklung.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuf\u00fchren, erweiterte Berechtigungen zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-2460 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2460.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-2460 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2460"
},
{
"category": "external",
"summary": "Atlassian Security Bulletin Juli vom 2026-07-21",
"url": "https://confluence.atlassian.com/security/security-bulletin-july-21-2026-1821999345.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46903 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46903"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46885 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-21286 vom 2026-07-28",
"url": "http://linux.oracle.com/errata/ELSA-2026-21286.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47388 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47388"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47451 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47451"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:44267 vom 2026-07-28",
"url": "https://access.redhat.com/errata/RHSA-2026:44267"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:44263 vom 2026-07-28",
"url": "https://access.redhat.com/errata/RHSA-2026:44263"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48126 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48126"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48124 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48124"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48151 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50300 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48693 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:48693"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:52768 vom 2026-08-10",
"url": "https://access.redhat.com/errata/RHSA-2026:52768"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:36625 vom 2026-08-13",
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2026-385 vom 2026-08-31",
"url": "https://www.dell.com/support/kbdoc/de-de/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities"
}
],
"source_lang": "en-US",
"title": "Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-08-31T22:00:00.000+00:00",
"generator": {
"date": "2026-09-01T10:57:19.041+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-2460",
"initial_release_date": "2026-07-21T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-07-21T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-07-27T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-28T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-29T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-04T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-09T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-13T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-31T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Dell aufgenommen"
}
],
"status": "final",
"version": "8"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c12.1.9",
"product": {
"name": "Atlassian Bamboo LTS \u003c12.1.9",
"product_id": "T057014"
}
},
{
"category": "product_version",
"name": "LTS 12.1.9",
"product": {
"name": "Atlassian Bamboo LTS 12.1.9",
"product_id": "T057014-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:lts__12.1.9"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c10.2.21",
"product": {
"name": "Atlassian Bamboo LTS \u003c10.2.21",
"product_id": "T057016"
}
},
{
"category": "product_version",
"name": "LTS 10.2.21",
"product": {
"name": "Atlassian Bamboo LTS 10.2.21",
"product_id": "T057016-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bamboo:lts__10.2.21"
}
}
}
],
"category": "product_name",
"name": "Bamboo"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c10.3.2",
"product": {
"name": "Atlassian Bitbucket LTS \u003c10.3.2",
"product_id": "T057017"
}
},
{
"category": "product_version",
"name": "LTS 10.3.2",
"product": {
"name": "Atlassian Bitbucket LTS 10.3.2",
"product_id": "T057017-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:lts__10.3.2"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c9.4.22",
"product": {
"name": "Atlassian Bitbucket LTS \u003c9.4.22",
"product_id": "T057018"
}
},
{
"category": "product_version",
"name": "LTS 9.4.22",
"product": {
"name": "Atlassian Bitbucket LTS 9.4.22",
"product_id": "T057018-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:bitbucket:lts__9.4.22"
}
}
}
],
"category": "product_name",
"name": "Bitbucket"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c10.2.14",
"product": {
"name": "Atlassian Confluence LTS \u003c10.2.14",
"product_id": "T057019"
}
},
{
"category": "product_version",
"name": "LTS 10.2.14",
"product": {
"name": "Atlassian Confluence LTS 10.2.14",
"product_id": "T057019-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:lts__10.2.14"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c9.2.22",
"product": {
"name": "Atlassian Confluence LTS \u003c9.2.22",
"product_id": "T057020"
}
},
{
"category": "product_version",
"name": "LTS 9.2.22",
"product": {
"name": "Atlassian Confluence LTS 9.2.22",
"product_id": "T057020-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:confluence:lts__9.2.22"
}
}
}
],
"category": "product_name",
"name": "Confluence"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.12",
"product": {
"name": "Atlassian Crucible \u003c4.9.12",
"product_id": "T057022"
}
},
{
"category": "product_version",
"name": "4.9.12",
"product": {
"name": "Atlassian Crucible 4.9.12",
"product_id": "T057022-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:crucible:4.9.12"
}
}
}
],
"category": "product_name",
"name": "Crucible"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c4.9.12",
"product": {
"name": "Atlassian Fisheye \u003c4.9.12",
"product_id": "T057021"
}
},
{
"category": "product_version",
"name": "4.9.12",
"product": {
"name": "Atlassian Fisheye 4.9.12",
"product_id": "T057021-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:fisheye:4.9.12"
}
}
}
],
"category": "product_name",
"name": "Fisheye"
},
{
"branches": [
{
"category": "product_version_range",
"name": "LTS \u003c11.3.8",
"product": {
"name": "Atlassian Jira LTS \u003c11.3.8",
"product_id": "T057023"
}
},
{
"category": "product_version",
"name": "LTS 11.3.8",
"product": {
"name": "Atlassian Jira LTS 11.3.8",
"product_id": "T057023-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:lts__11.3.8"
}
}
},
{
"category": "product_version_range",
"name": "LTS \u003c10.3.23",
"product": {
"name": "Atlassian Jira LTS \u003c10.3.23",
"product_id": "T057024"
}
},
{
"category": "product_version",
"name": "LTS 10.3.23",
"product": {
"name": "Atlassian Jira LTS 10.3.23",
"product_id": "T057024-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:atlassian:jira:lts__10.3.23"
}
}
}
],
"category": "product_name",
"name": "Jira"
}
],
"category": "vendor",
"name": "Atlassian"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c5.36.00.16",
"product": {
"name": "Dell Secure Connect Gateway \u003c5.36.00.16",
"product_id": "T058878"
}
},
{
"category": "product_version",
"name": "5.36.00.16",
"product": {
"name": "Dell Secure Connect Gateway 5.36.00.16",
"product_id": "T058878-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:secure_connect_gateway:5.36.00.16"
}
}
}
],
"category": "product_name",
"name": "Secure Connect Gateway"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T056236",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10540",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2016-10540"
},
{
"cve": "CVE-2020-28282",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2020-28282"
},
{
"cve": "CVE-2020-7729",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2020-7729"
},
{
"cve": "CVE-2021-22569",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2021-22569"
},
{
"cve": "CVE-2021-23358",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2021-23358"
},
{
"cve": "CVE-2022-1537",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-1537"
},
{
"cve": "CVE-2022-3509",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-3509"
},
{
"cve": "CVE-2022-3510",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-3510"
},
{
"cve": "CVE-2022-37599",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37599"
},
{
"cve": "CVE-2022-37601",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37601"
},
{
"cve": "CVE-2022-37603",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2022-37603"
},
{
"cve": "CVE-2024-7254",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2024-7254"
},
{
"cve": "CVE-2025-11226",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-11226"
},
{
"cve": "CVE-2025-14813",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-14813"
},
{
"cve": "CVE-2025-62718",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-62718"
},
{
"cve": "CVE-2025-69873",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2025-69873"
},
{
"cve": "CVE-2026-12143",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-12143"
},
{
"cve": "CVE-2026-21575",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21575"
},
{
"cve": "CVE-2026-21577",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21577"
},
{
"cve": "CVE-2026-21579",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-21579"
},
{
"cve": "CVE-2026-22731",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-22731"
},
{
"cve": "CVE-2026-2332",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-2332"
},
{
"cve": "CVE-2026-27830",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-27830"
},
{
"cve": "CVE-2026-29063",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29063"
},
{
"cve": "CVE-2026-29145",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29145"
},
{
"cve": "CVE-2026-29146",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-29146"
},
{
"cve": "CVE-2026-31802",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-31802"
},
{
"cve": "CVE-2026-33671",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33671"
},
{
"cve": "CVE-2026-33870",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33870"
},
{
"cve": "CVE-2026-33871",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-33871"
},
{
"cve": "CVE-2026-34043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-34043"
},
{
"cve": "CVE-2026-35554",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-35554"
},
{
"cve": "CVE-2026-40175",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-40175"
},
{
"cve": "CVE-2026-42033",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42033"
},
{
"cve": "CVE-2026-42035",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42035"
},
{
"cve": "CVE-2026-42041",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42041"
},
{
"cve": "CVE-2026-42043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42043"
},
{
"cve": "CVE-2026-42044",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42044"
},
{
"cve": "CVE-2026-42198",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42198"
},
{
"cve": "CVE-2026-42264",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42264"
},
{
"cve": "CVE-2026-42581",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42581"
},
{
"cve": "CVE-2026-42583",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42583"
},
{
"cve": "CVE-2026-42585",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42585"
},
{
"cve": "CVE-2026-42587",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42587"
},
{
"cve": "CVE-2026-42588",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-42588"
},
{
"cve": "CVE-2026-44249",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44249"
},
{
"cve": "CVE-2026-44486",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44486"
},
{
"cve": "CVE-2026-44487",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44487"
},
{
"cve": "CVE-2026-44488",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44488"
},
{
"cve": "CVE-2026-44490",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44490"
},
{
"cve": "CVE-2026-44492",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44492"
},
{
"cve": "CVE-2026-44494",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44494"
},
{
"cve": "CVE-2026-44495",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44495"
},
{
"cve": "CVE-2026-44496",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44496"
},
{
"cve": "CVE-2026-44705",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-44705"
},
{
"cve": "CVE-2026-45416",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45416"
},
{
"cve": "CVE-2026-45505",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45505"
},
{
"cve": "CVE-2026-45736",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-45736"
},
{
"cve": "CVE-2026-46625",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-46625"
},
{
"cve": "CVE-2026-47838",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-47838"
},
{
"cve": "CVE-2026-4800",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-4800"
},
{
"cve": "CVE-2026-48043",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-48043"
},
{
"cve": "CVE-2026-48779",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-48779"
},
{
"cve": "CVE-2026-50010",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-50010"
},
{
"cve": "CVE-2026-5598",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-5598"
},
{
"cve": "CVE-2026-6321",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-6321"
},
{
"cve": "CVE-2026-6322",
"product_status": {
"known_affected": [
"T056236",
"T057017",
"T057018",
"T057019",
"T058878",
"67646",
"T057020",
"T057021",
"T057022",
"T057023",
"T057024",
"T057014",
"T057016"
]
},
"release_date": "2026-07-21T22:00:00.000+00:00",
"title": "CVE-2026-6322"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…