{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eJBoss Group JBoss Seam 2.x.\u003c/p\u003e",
  "content": "## Description\n\nJBoss Seam 2 ne g\u00e8re pas correctement l\u0027acc\u00e8s au JBoss Expression\nLanguage dans les pages d\u0027exception. Ce d\u00e9faut est exploitable par un\nutilisateur malveillant pour ex\u00e9cuter des m\u00e9thodes Java arbitraires au\nmoyen d\u0027une adresse r\u00e9ticulaire (URL) sp\u00e9cialement construite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2196"
    }
  ],
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0946.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0950.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0948.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0952.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0947.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0945.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0951.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0949.html"
    }
  ],
  "reference": "CERTA-2011-AVI-401",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-07-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans JBoss permet \u00e0 un utilisateur malveillant\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans JBoss",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0 0952 du 18 juillet 2011",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HP Network Node Manager I version 9.1 ant\u00e9rieures au correctif HF-NNMi-9.1xP5-JBoss-20130417",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Network Node Manager I version 9.0 ant\u00e9rieures au correctif HF-NNMi-9.0xP5-JBoss-20130417",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2196"
    },
    {
      "name": "CVE-2011-4605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4605"
    },
    {
      "name": "CVE-2010-1429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1429"
    },
    {
      "name": "CVE-2011-4858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4858"
    },
    {
      "name": "CVE-2010-0738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0738"
    },
    {
      "name": "CVE-2010-1428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1428"
    },
    {
      "name": "CVE-2009-3554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3554"
    },
    {
      "name": "CVE-2012-3546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3546"
    },
    {
      "name": "CVE-2007-5333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5333"
    },
    {
      "name": "CVE-2011-1483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1483"
    }
  ],
  "links": [],
  "reference": "CERTA-2013-AVI-440",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eHP Network Node Manager I\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans HP Network Node Manager I",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 HP du 24 juillet 2013",
      "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eJBoss Group JBoss Seam 2.x.\u003c/p\u003e",
  "content": "## Description\n\nJBoss Seam 2 ne g\u00e8re pas correctement l\u0027acc\u00e8s au JBoss Expression\nLanguage dans les pages d\u0027exception. Ce d\u00e9faut est exploitable par un\nutilisateur malveillant pour ex\u00e9cuter des m\u00e9thodes Java arbitraires au\nmoyen d\u0027une adresse r\u00e9ticulaire (URL) sp\u00e9cialement construite.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2196"
    }
  ],
  "links": [
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0946.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0950.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0948.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0952.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0947.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0945.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0951.html"
    },
    {
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0    RHSA-2011:0952 du 18 juillet 2011 :",
      "url": "http://rhn.redhat.com/errata/RHSA-2011-0949.html"
    }
  ],
  "reference": "CERTA-2011-AVI-401",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-07-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans JBoss permet \u00e0 un utilisateur malveillant\nd\u0027ex\u00e9cuter du code arbitraire \u00e0 distance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans JBoss",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 RedHat RHSA-2011:0945 \u00e0 0952 du 18 juillet 2011",
      "url": null
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HP Network Node Manager I version 9.1 ant\u00e9rieures au correctif HF-NNMi-9.1xP5-JBoss-20130417",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Network Node Manager I version 9.0 ant\u00e9rieures au correctif HF-NNMi-9.0xP5-JBoss-20130417",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2196"
    },
    {
      "name": "CVE-2011-4605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4605"
    },
    {
      "name": "CVE-2010-1429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1429"
    },
    {
      "name": "CVE-2011-4858",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4858"
    },
    {
      "name": "CVE-2010-0738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0738"
    },
    {
      "name": "CVE-2010-1428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1428"
    },
    {
      "name": "CVE-2009-3554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3554"
    },
    {
      "name": "CVE-2012-3546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3546"
    },
    {
      "name": "CVE-2007-5333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5333"
    },
    {
      "name": "CVE-2011-1483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1483"
    }
  ],
  "links": [],
  "reference": "CERTA-2013-AVI-440",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eHP Network Node Manager I\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de\nservice \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans HP Network Node Manager I",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 HP du 24 juillet 2013",
      "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03824583"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E82B2AD8-967D-4ABE-982B-87B9DE73F8D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp09:*:*:*:*:*:*",
              "matchCriteriaId": "FA7424BA-1E18-4267-9697-F4560BE75359",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C13890AE-5FDE-4698-8A2E-1B2FA0A313AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05:*:*:*:*:*:*",
              "matchCriteriaId": "67BD448A-745D-4387-ABC8-A18DF142574D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B72D56E-DE3C-4383-906D-F3DCD9D09CC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F20B8708-8EC6-4B0E-9693-131F91A4FC15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB8AAFEA-2C73-460E-AAF3-C076041C7335",
              "versionEndIncluding": "2.2.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "4664C66E-3F4B-471E-AAC9-276834A55499",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "43CACD28-B9A3-46D5-BA99-AA578F51D693",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "1A4951C4-8941-4A7F-B742-B50A812CC4B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr3:*:*:*:*:*:*",
              "matchCriteriaId": "1A83D0E2-C724-47D1-9A98-7ACADA8810DA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:ga:*:*:*:*:*:*",
              "matchCriteriaId": "56B7E191-8A62-4BDE-90A4-192BA5696A39",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "4A027797-81BC-4826-BBCC-C5EAEAB3E503",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "67F9B8C2-D2BE-4B4A-829C-528EC716C3FF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:ga:*:*:*:*:*:*",
              "matchCriteriaId": "D38126DF-747B-4892-9B63-E7E35F98C760",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "ECD78557-9403-496D-8512-FA693E291164",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "CB076878-0465-44C7-AE59-C9584B3CEE1F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:ga:*:*:*:*:*:*",
              "matchCriteriaId": "F682D85A-5B8C-4F83-BABD-9D28775C3776",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "43DA16B0-8E35-444D-B0BC-6774BBEC9E49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.3:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "D249483C-D9F2-474F-9DDD-775CA573A642",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:alpha1:*:*:*:*:*:*",
              "matchCriteriaId": "C5BD9104-7BE9-420F-8DB2-C07748941254",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "A6513765-FEB9-4D7E-AE29-E479707AED02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "42291710-D8D1-4C77-8A62-E0B80BA3D5AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:ga:*:*:*:*:*:*",
              "matchCriteriaId": "0BBFD756-FF7B-4163-9924-CC922A7EA1AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "226579DC-5DFE-4778-9871-4137B556D3A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "CB03E6D7-1A07-49EB-AB21-E136132BDF1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "68FE6392-8774-4534-8903-BE9154FE2795",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:ga:*:*:*:*:*:*",
              "matchCriteriaId": "9F98F783-0AB2-41BE-8B07-D62438824541",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A206D39-DBF9-4B14-8703-9081682A1EEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "32B2FE67-27F7-4BF7-A78A-0A5FAAADFE20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "1371416C-30C8-47A6-8A0C-F4E37875BE8F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.0:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "CA790538-865A-4249-B6F9-F0CEC5818E57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.0:ga:*:*:*:*:*:*",
              "matchCriteriaId": "62AB605C-3102-4425-A563-817445B2F187",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E6F5051-BF57-44EA-942F-9E74A06D8B45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr1:*:*:*:*:*:*",
              "matchCriteriaId": "0FD6DFE0-4FC8-4311-A724-666AA48A64C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr2:*:*:*:*:*:*",
              "matchCriteriaId": "EB833625-4D55-4BFE-A05C-5650D342C461",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr3:*:*:*:*:*:*",
              "matchCriteriaId": "CB5F7791-FC8F-4E6C-B14D-A31D69086895",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484."
    },
    {
      "lang": "es",
      "value": "jboss-seam.jar en el framework de JBoss Seam 2 v2.2.x y anteriores, como el distribuido en Red Hat JBoss Enterprise SOA Platform v4.3.0.CP05 y v5.1.0; JBoss Enterprise Application Platform (tambi\u00e9n conocido como JBoss EAP o JBEAP) v4.3.0, v4.3.0.CP09, y v5.1.1; y JBoss Enterprise Web Platform v5.1.1, no restringen el uso de elementos Expression Language (EL) en FacesMessages durante la gesti\u00f3n de la p\u00e1gina de excepci\u00f3n, lo que permite a atacantes remotos ejecutar c\u00f3digo Java a trav\u00e9s de una URL manipulada  para una aplicaci\u00f3n. NOTA: esta vulnerabilidad existe debido a una soluci\u00f3n incompleta para CVE-2011-1484."
    }
  ],
  "id": "CVE-2011-2196",
  "lastModified": "2026-04-29T01:13:23.040",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-07-27T02:55:01.743",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0945.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0946.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0947.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0948.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0949.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0950.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0951.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0952.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/48716"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=712283"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0945.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0946.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0947.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0948.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0949.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0950.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0951.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0952.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/48716"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=712283"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2011-2196"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-07-27T02:55:00Z",
    "severity": "MODERATE"
  },
  "details": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.",
  "id": "GHSA-6m4p-jvxh-733r",
  "modified": "2022-05-17T05:40:11Z",
  "published": "2022-05-17T05:40:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-2196"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=712283"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0945.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0946.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0947.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0948.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0949.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0950.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0951.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-0952.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/48716"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "GSD": {
    "alias": "CVE-2011-2196",
    "description": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.",
    "id": "GSD-2011-2196",
    "references": [
      "https://access.redhat.com/errata/RHSA-2011:0952",
      "https://access.redhat.com/errata/RHSA-2011:0951",
      "https://access.redhat.com/errata/RHSA-2011:0950",
      "https://access.redhat.com/errata/RHSA-2011:0949",
      "https://access.redhat.com/errata/RHSA-2011:0948",
      "https://access.redhat.com/errata/RHSA-2011:0947",
      "https://access.redhat.com/errata/RHSA-2011:0946",
      "https://access.redhat.com/errata/RHSA-2011:0945"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-2196"
      ],
      "details": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.",
      "id": "GSD-2011-2196",
      "modified": "2023-12-13T01:19:06.644530Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2011-2196",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0945.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0945.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0946.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0946.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0947.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0947.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0948.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0948.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0949.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0949.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0950.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0950.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0951.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0951.html"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2011-0952.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2011-0952.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/48716",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/48716"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=712283",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=712283"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.2.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.0:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:alpha1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.1.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.0:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_application_platform:4.3.0:cp09:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.3:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.0:beta1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.1:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_soa_platform:4.3.0:cp05:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.2.1:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.1.1:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.0:ga:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:jboss_seam_2_framework:2.0.2:cr2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2196"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2011:0952",
              "refsource": "REDHAT",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0952.html"
            },
            {
              "name": "RHSA-2011:0946",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0946.html"
            },
            {
              "name": "RHSA-2011:0945",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0945.html"
            },
            {
              "name": "RHSA-2011:0948",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0948.html"
            },
            {
              "name": "RHSA-2011:0947",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0947.html"
            },
            {
              "name": "48716",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/48716"
            },
            {
              "name": "RHSA-2011:0951",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0951.html"
            },
            {
              "name": "RHSA-2011:0950",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0950.html"
            },
            {
              "name": "RHSA-2011:0949",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2011-0949.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=712283",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=712283"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2023-02-13T01:19Z",
      "publishedDate": "2011-07-27T02:55Z"
    }
  }
}