Vulnerability-Lookup

CVE-2023-38709 (GCVE-0-2023-38709)

Vulnerability from cvelistv5 – Published: 2024-04-04 19:19 – Updated: 2025-11-04 21:08

Title

Apache HTTP Server: HTTP response splitting

Summary

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

HTTP response splitting
CWE-1284 - Improper Validation of Specified Quantity in Input

Assigner

apache

References

11 references

URL	Tags
https://httpd.apache.org/security/vulnerabilities…	vendor-advisory
https://security.netapp.com/advisory/ntap-2024041…
https://lists.fedoraproject.org/archives/list/pac…
http://www.openwall.com/lists/oss-security/2024/04/04/3
https://lists.fedoraproject.org/archives/list/pac…
https://lists.fedoraproject.org/archives/list/pac…
https://lists.debian.org/debian-lts-announce/2024…
https://support.apple.com/kb/HT214119
http://seclists.org/fulldisclosure/2024/Jul/18
http://www.openwall.com/lists/oss-security/2025/07/10/2
http://www.openwall.com/lists/oss-security/2025/07/10/3

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache HTTP Server	Affected: 0 , ≤ 2.4.58 (semver)
apache	http_server	Affected: 0 , ≤ 2.4.58 (custom) cpe:2.3:a:apache:http_server::::::::

Credits

Orange Tsai (@orange_8361) from DEVCORE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "http_server",
            "vendor": "apache",
            "versions": [
              {
                "lessThanOrEqual": "2.4.58",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-38709",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-05T13:57:02.091077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1284",
                "description": "CWE-1284 Improper Validation of Specified Quantity in Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-05T19:38:10.128Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T21:08:23.335Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240415-0013/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/04/04/3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214119"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/10/2"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/07/10/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Apache HTTP Server",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThanOrEqual": "2.4.58",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Orange Tsai (@orange_8361) from DEVCORE"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\u003cbr\u003e\u003cbr\u003eThis issue affects Apache HTTP Server: through 2.4.58.\u003cbr\u003e"
            }
          ],
          "value": "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "HTTP response splitting",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-29T22:06:19.848Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240415-0013/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/04/04/3"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/"
        },
        {
          "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html"
        },
        {
          "url": "https://support.apple.com/kb/HT214119"
        },
        {
          "url": "http://seclists.org/fulldisclosure/2024/Jul/18"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2023-06-26T00:00:00.000Z",
          "value": "reported"
        }
      ],
      "title": "Apache HTTP Server: HTTP response splitting",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2023-38709",
    "datePublished": "2024-04-04T19:19:35.467Z",
    "dateReserved": "2023-07-24T17:51:18.042Z",
    "dateUpdated": "2025-11-04T21:08:23.335Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-38709",
      "date": "2026-07-05",
      "epss": "0.03914",
      "percentile": "0.89041"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\\n\\nThis issue affects Apache HTTP Server: through 2.4.58.\"}, {\"lang\": \"es\", \"value\": \"La validaci\\u00f3n de entrada defectuosa en el n\\u00facleo de Apache permite que generadores de contenido/backend maliciosos o explotables dividan las respuestas HTTP. Este problema afecta al servidor HTTP Apache: hasta 2.4.58.\"}]",
      "id": "CVE-2023-38709",
      "lastModified": "2024-11-21T08:14:05.917",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.4}]}",
      "published": "2024-04-04T20:15:08.047",
      "references": "[{\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"source\": \"security@apache.org\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/04/3\", \"source\": \"security@apache.org\"}, {\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\", \"source\": \"security@apache.org\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240415-0013/\", \"source\": \"security@apache.org\"}, {\"url\": \"https://support.apple.com/kb/HT214119\", \"source\": \"security@apache.org\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/04/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240415-0013/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.apple.com/kb/HT214119\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "security@apache.org",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-1284\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-38709\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2024-04-04T20:15:08.047\",\"lastModified\":\"2026-06-17T06:10:59.800\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\\n\\nThis issue affects Apache HTTP Server: through 2.4.58.\"},{\"lang\":\"es\",\"value\":\"La validaci\u00f3n de entrada defectuosa en el n\u00facleo de Apache permite que generadores de contenido/backend maliciosos o explotables dividan las respuestas HTTP. Este problema afecta al servidor HTTP Apache: hasta 2.4.58.\"}],\"affected\":[{\"source\":\"security@apache.org\",\"affectedData\":[{\"vendor\":\"Apache Software Foundation\",\"product\":\"Apache HTTP Server\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.4.58\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"apache\",\"product\":\"http_server\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.4.58\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-04-05T13:57:02.091077Z\",\"id\":\"CVE-2023-38709\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.4.59\",\"matchCriteriaId\":\"D9CA78ED-0BBB-45B4-AC78-1483FAC4987B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA277A6C-83EC-4536-9125-97B84C4FAF59\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A20333EE-4C13-426E-8B54-D78679D5DDB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"5333B745-F7A3-46CB-8437-8668DB08CD6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"046FB51E-B768-44D3-AEB5-D857145CA840\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"14.6\",\"matchCriteriaId\":\"687902EF-637F-4537-B419-15A1695370B9\"}]}]}],\"references\":[{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/18\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/04/3\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://httpd.apache.org/security/vulnerabilities_24.html\",\"source\":\"security@apache.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240415-0013/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214119\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://seclists.org/fulldisclosure/2024/Jul/18\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/04/04/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/07/10/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2025/07/10/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://httpd.apache.org/security/vulnerabilities_24.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240415-0013/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214119\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240415-0013/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/04/3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214119\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2025/07/10/2\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2025/07/10/3\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-04T21:08:23.335Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-38709\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-04-05T13:57:02.091077Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\"], \"vendor\": \"apache\", \"product\": \"http_server\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.4.58\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1284\", \"description\": \"CWE-1284 Improper Validation of Specified Quantity in Input\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:22.169Z\"}}], \"cna\": {\"title\": \"Apache HTTP Server: HTTP response splitting\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Orange Tsai (@orange_8361) from DEVCORE\"}], \"metrics\": [{\"other\": {\"type\": \"Textual description of severity\", \"content\": {\"text\": \"moderate\"}}}], \"affected\": [{\"vendor\": \"Apache Software Foundation\", \"product\": \"Apache HTTP Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"2.4.58\"}], \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2023-06-26T00:00:00.000Z\", \"value\": \"reported\"}], \"references\": [{\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20240415-0013/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/04/04/3\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html\"}, {\"url\": \"https://support.apple.com/kb/HT214119\"}, {\"url\": \"http://seclists.org/fulldisclosure/2024/Jul/18\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\\n\\nThis issue affects Apache HTTP Server: through 2.4.58.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\u003cbr\u003e\u003cbr\u003eThis issue affects Apache HTTP Server: through 2.4.58.\u003cbr\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"HTTP response splitting\"}]}], \"providerMetadata\": {\"orgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"shortName\": \"apache\", \"dateUpdated\": \"2024-07-29T22:06:19.848Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-38709\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-04T21:08:23.335Z\", \"dateReserved\": \"2023-07-24T17:51:18.042Z\", \"assignerOrgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"datePublished\": \"2024-04-04T19:19:35.467Z\", \"assignerShortName\": \"apache\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

NCSC-2024-0433

Vulnerability from csaf_ncscnl - Published: 2024-11-12 14:19 - Updated: 2024-11-12 14:19

Summary

Kwetsbaarheden verholpen in Siemens producten

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.

Interpretaties: De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: - Denial-of-Service (DoS) - Cross-Site-Scripting (XSS) - Manipulatie van gegevens - Omzeilen van een beveiligingsmaatregel - Omzeilen van authenticatie - (Remote) code execution (Administrator/Root rechten) - (Remote) code execution (Gebruikersrechten) - Toegang tot systeemgegevens - Verhoogde gebruikersrechten De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Oplossingen: Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-606: Unchecked Input for Loop Condition

CWE-1240: Use of a Cryptographic Primitive with a Risky Implementation

CWE-115: Misinterpretation of Input

CWE-1059: Insufficient Technical Documentation

CWE-1325: Improperly Controlled Sequential Memory Allocation

CWE-222: Truncation of Security-relevant Information

CWE-310: CWE-310

CWE-328: Use of Weak Hash

CWE-1284: Improper Validation of Specified Quantity in Input

CWE-213: Exposure of Sensitive Information Due to Incompatible Policies

CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents

CWE-684: Incorrect Provision of Specified Functionality

CWE-772: Missing Release of Resource after Effective Lifetime

CWE-208: Observable Timing Discrepancy

CWE-201: Insertion of Sensitive Information Into Sent Data

CWE-834: Excessive Iteration

CWE-266: Incorrect Privilege Assignment

CWE-942: Permissive Cross-domain Policy with Untrusted Domains

CWE-271: Privilege Dropping / Lowering Errors

CWE-732: Incorrect Permission Assignment for Critical Resource

CWE-667: Improper Locking

CWE-440: Expected Behavior Violation

CWE-297: Improper Validation of Certificate with Host Mismatch

CWE-311: Missing Encryption of Sensitive Data

CWE-754: Improper Check for Unusual or Exceptional Conditions

CWE-617: Reachable Assertion

CWE-427: Uncontrolled Search Path Element

CWE-319: Cleartext Transmission of Sensitive Information

CWE-613: Insufficient Session Expiration

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CWE-203: Observable Discrepancy

CWE-354: Improper Validation of Integrity Check Value

CWE-325: Missing Cryptographic Step

CWE-190: Integer Overflow or Wraparound

CWE-321: Use of Hard-coded Cryptographic Key

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CWE-125: Out-of-bounds Read

CWE-404: Improper Resource Shutdown or Release

CWE-275: CWE-275

CWE-284: Improper Access Control

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1333: Inefficient Regular Expression Complexity

CWE-416: Use After Free

CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CWE-401: Missing Release of Memory after Effective Lifetime

CWE-476: NULL Pointer Dereference

CWE-295: Improper Certificate Validation

CWE-757: Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

CWE-94: Improper Control of Generation of Code ('Code Injection')

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

CWE-436: Interpretation Conflict

CWE-400: Uncontrolled Resource Consumption

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-502: Deserialization of Untrusted Data

CWE-918: Server-Side Request Forgery (SSRF)

CWE-863: Incorrect Authorization

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-787: Out-of-bounds Write

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-122: Heap-based Buffer Overflow

CWE-121: Stack-based Buffer Overflow

CWE-789: Memory Allocation with Excessive Size Value

CWE-269: Improper Privilege Management

CWE-20: Improper Input Validation

CWE-287: Improper Authentication

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-3506

CWE-125 - Out-of-bounds Read

CVE-2023-2975

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-287 - Improper Authentication

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
simatic_mv500_family siemens	`cpe:2.3:a:siemens:simatic_mv500_family::::::::`	—
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-3341

CWE-20 - Improper Input Validation

CVE-2023-3446

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Known affected 10 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_mv500_family siemens	`cpe:2.3:a:siemens:simatic_mv500_family::::::::`	—
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—
telecontrol_server_basic_v3 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_v3::::::::`	—
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—
st7_scadaconnect__6nh7997-5da10-0aa0_ siemens	`cpe:2.3:a:siemens:st7_scadaconnect__6nh7997-5da10-0aa0_::::::::`	—

CVE-2023-3817

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Known affected 8 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_s7 siemens	`cpe:2.3:h:siemens:simatic_s7:1500:::::::*`	—
simatic_mv500_family siemens	`cpe:2.3:a:siemens:simatic_mv500_family::::::::`	—
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-4236

CWE-617 - Reachable Assertion

CVE-2023-4408

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-4807

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 13 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
telecontrol_server_basic_v3 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_v3::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da00_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da00_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da30_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea30_::::::::`	—

CVE-2023-5363

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-325 - Missing Cryptographic Step

Affected products

Known affected 7 products

Product	Identifier	Version
simatic_rtls_locating_manager__6gt2780-0da00_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da00_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da30_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea30_::::::::`	—

CVE-2023-5517

CWE-617 - Reachable Assertion

CVE-2023-5678

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Affected products

Known affected 17 products

CVE-2023-5679

CWE-617 - Reachable Assertion

CVE-2023-5680

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-6129

CWE-328 - Use of Weak Hash

CVE-2023-6237

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-6516

CWE-770 - Allocation of Resources Without Limits or Throttling

CVE-2023-7104

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-122 - Heap-based Buffer Overflow

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2023-28450

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 11 products

Product	Identifier	Version
scalance_xch328__6gk5328-4ts01-2ec2_ siemens	`cpe:2.3:a:siemens:scalance_xch328__6gk5328-4ts01-2ec2_::::::::`	—
scalance_xcm324__6gk5324-8ts01-2ac2_ siemens	`cpe:2.3:a:siemens:scalance_xcm324__6gk5324-8ts01-2ac2_::::::::`	—
scalance_xcm328__6gk5328-4ts01-2ac2_ siemens	`cpe:2.3:a:siemens:scalance_xcm328__6gk5328-4ts01-2ac2_::::::::`	—
scalance_xcm332__6gk5332-0ga01-2ac2_ siemens	`cpe:2.3:a:siemens:scalance_xcm332__6gk5332-0ga01-2ac2_::::::::`	—
scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_ siemens	`cpe:2.3:a:siemens:scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_::::::::`	—
scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_::::::::`	—
scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_::::::::`	—
scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_::::::::`	—
scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_::::::::`	—
scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_::::::::`	—
scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_ siemens	`cpe:2.3:a:siemens:scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_::::::::`	—

CVE-2023-30584

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-20 - Improper Input Validation

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32002

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-275 - -

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32003

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32004

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32005

CWE-275 - -

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32006

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-275 - -

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32558

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32559

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-275 - -

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2023-32736

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 30 products

Product	Identifier	Version
simatic_s7-plcsim_v16 siemens	`cpe:2.3:a:siemens:simatic_s7-plcsim_v16::::::::`	—
simatic_s7-plcsim_v17 siemens	`cpe:2.3:a:siemens:simatic_s7-plcsim_v17::::::::`	—
simatic_step_7_safety_v16 siemens	`cpe:2.3:a:siemens:simatic_step_7_safety_v16::::::::`	—
simatic_step_7_safety_v17 siemens	`cpe:2.3:a:siemens:simatic_step_7_safety_v17::::::::`	—
simatic_step_7_safety_v18 siemens	`cpe:2.3:a:siemens:simatic_step_7_safety_v18::::::::`	—
simatic_step_7_v16 siemens	`cpe:2.3:a:siemens:simatic_step_7_v16::::::::`	—
simatic_step_7_v17 siemens	`cpe:2.3:a:siemens:simatic_step_7_v17::::::::`	—
simatic_step_7_v18 siemens	`cpe:2.3:a:siemens:simatic_step_7_v18::::::::`	—
simatic_wincc_unified_v16 siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_v16::::::::`	—
simatic_wincc_unified_v17 siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_v17::::::::`	—
simatic_wincc_unified_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_v18::::::::`	—
simatic_wincc_v16 siemens	`cpe:2.3:a:siemens:simatic_wincc_v16::::::::`	—
simatic_wincc_v17 siemens	`cpe:2.3:a:siemens:simatic_wincc_v17::::::::`	—
simatic_wincc_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_v18::::::::`	—
simocode_es_v16 siemens	`cpe:2.3:a:siemens:simocode_es_v16::::::::`	—
simocode_es_v17 siemens	`cpe:2.3:a:siemens:simocode_es_v17::::::::`	—
simocode_es_v18 siemens	`cpe:2.3:a:siemens:simocode_es_v18::::::::`	—
simotion_scout_tia_v5.4_sp1 siemens	`cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp1::::::::`	—
simotion_scout_tia_v5.4_sp3 siemens	`cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp3::::::::`	—
simotion_scout_tia_v5.5_sp1 siemens	`cpe:2.3:a:siemens:simotion_scout_tia_v5.5_sp1::::::::`	—
sinamics_startdrive_v16 siemens	`cpe:2.3:a:siemens:sinamics_startdrive_v16::::::::`	—
sinamics_startdrive_v17 siemens	`cpe:2.3:a:siemens:sinamics_startdrive_v17::::::::`	—
sinamics_startdrive_v18 siemens	`cpe:2.3:a:siemens:sinamics_startdrive_v18::::::::`	—
sirius_safety_es_v17 siemens	`cpe:2.3:a:siemens:sirius_safety_es_v17::::::::`	—
sirius_safety_es_v18 siemens	`cpe:2.3:a:siemens:sirius_safety_es_v18::::::::`	—
sirius_soft_starter_es_v17 siemens	`cpe:2.3:a:siemens:sirius_soft_starter_es_v17::::::::`	—
sirius_soft_starter_es_v18 siemens	`cpe:2.3:a:siemens:sirius_soft_starter_es_v18::::::::`	—
tia_portal_cloud_v16 siemens	`cpe:2.3:a:siemens:tia_portal_cloud_v16::::::::`	—
tia_portal_cloud_v17 siemens	`cpe:2.3:a:siemens:tia_portal_cloud_v17::::::::`	—
tia_portal_cloud_v18 siemens	`cpe:2.3:a:siemens:tia_portal_cloud_v18::::::::`	—

CVE-2023-38552

CWE-354 - Improper Validation of Integrity Check Value

CVE-2023-38709

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CVE-2023-39331

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2023-39332

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2023-39333

CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVE-2023-44487

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 8 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—
ruggedcom_ape1808 siemens	`cpe:2.3:a:siemens:ruggedcom_ape1808::::::::`	—
st7_scadaconnect__6nh7997-5da10-0aa0_ siemens	`cpe:2.3:a:siemens:st7_scadaconnect__6nh7997-5da10-0aa0_::::::::`	—

CVE-2023-45143

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

CVE-2023-46218

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE-201 - Insertion of Sensitive Information Into Sent Data

Affected products

Known affected 12 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da00_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da00_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da30_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea30_::::::::`	—

CVE-2023-46219

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-311 - Missing Encryption of Sensitive Data

Affected products

Known affected 12 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da00_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da00_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-0da30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da30_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea10_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea10_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea20_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea20_::::::::`	—
simatic_rtls_locating_manager__6gt2780-1ea30_ siemens	`cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea30_::::::::`	—

CVE-2023-46280

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C

CWE-125 - Out-of-bounds Read

Affected products

Known affected 77 products

Product	Identifier	Version
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms:0:::::::*`	—
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—
sinumerik_plc_programming_tool siemens	`cpe:2.3:a:siemens:sinumerik_plc_programming_tool::::::::`	—
simatic_batch_v9.1 siemens	`cpe:2.3:a:siemens:simatic_batch_v9.1::::::::`	—
sinamics_startdrive siemens	`cpe:2.3:a:siemens:sinamics_startdrive::::::::`	—
simatic_wincc siemens	`cpe:2.3:a:siemens:simatic_wincc::::::::`	—
sinumerik_one_virtual siemens	`cpe:2.3:a:siemens:sinumerik_one_virtual::::::::`	—
simatic_wincc_runtime_professional siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional::::::::`	—
tia_portal_cloud_connector siemens	`cpe:2.3:a:siemens:tia_portal_cloud_connector::::::::`	—
simatic_wincc_runtime_advanced siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_advanced::::::::`	—
simatic_automation_tool siemens	`cpe:2.3:a:siemens:simatic_automation_tool:0:::::::*`	—
simatic_net_pc_software_v19 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v19:0:::::::*`	—
simatic_wincc_unified_pc_runtime_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v18:0:::::::*`	—
s7-pct siemens	`cpe:2.3:a:siemens:s7-pct::::::::`	—
security_configuration_tool__sct_ siemens	`cpe:2.3:a:siemens:security_configuration_tool__sct_::::::::`	—
simatic_net_pc_software_v16 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v16::::::::`	—
simatic_net_pc_software_v17 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v17::::::::`	—
simatic_net_pc_software_v18 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v18::::::::`	—
simatic_net_pc_software_v19 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v19::::::::`	—
simatic_pcs_7_v9.1 siemens	`cpe:2.3:a:siemens:simatic_pcs_7_v9.1::::::::`	—
simatic_pdm_v9.2 siemens	`cpe:2.3:a:siemens:simatic_pdm_v9.2::::::::`	—
simatic_route_control_v9.1 siemens	`cpe:2.3:a:siemens:simatic_route_control_v9.1::::::::`	—
simatic_step_7_v5 siemens	`cpe:2.3:a:siemens:simatic_step_7_v5::::::::`	—
simatic_wincc_oa_v3.17 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.17::::::::`	—
simatic_wincc_oa_v3.18 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.18::::::::`	—
simatic_wincc_oa_v3.19 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.19::::::::`	—
simatic_wincc_runtime_professional_v16 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v16::::::::`	—
simatic_wincc_runtime_professional_v17 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17::::::::`	—
simatic_wincc_runtime_professional_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18::::::::`	—
simatic_wincc_runtime_professional_v19 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19::::::::`	—
simatic_wincc_unified_pc_runtime_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v18::::::::`	—
simatic_wincc_v7.4 siemens	`cpe:2.3:a:siemens:simatic_wincc_v7.4::::::::`	—
simatic_wincc_v7.5 siemens	`cpe:2.3:a:siemens:simatic_wincc_v7.5::::::::`	—
simatic_wincc_v8.0 siemens	`cpe:2.3:a:siemens:simatic_wincc_v8.0::::::::`	—
totally_integrated_automation_portal__tia_portal__v15.1 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v15.1::::::::`	—
totally_integrated_automation_portal__tia_portal__v16 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16::::::::`	—
totally_integrated_automation_portal__tia_portal__v17 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17::::::::`	—
totally_integrated_automation_portal__tia_portal__v18 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18::::::::`	—
totally_integrated_automation_portal__tia_portal__v19 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19::::::::`	—
s7-pct siemens	`cpe:2.3:a:siemens:s7-pct:0:::::::*`	—
security_configuration_tool__sct_ siemens	`cpe:2.3:a:siemens:security_configuration_tool__sct_:0:::::::*`	—
simatic_automation_tool siemens	`cpe:2.3:a:siemens:simatic_automation_tool:all_versions:::::::*`	—
simatic_batch_v9.1 siemens	`cpe:2.3:a:siemens:simatic_batch_v9.1:0:::::::*`	—
simatic_net_pc_software siemens	`cpe:2.3:a:siemens:simatic_net_pc_software:0:::::::*`	—
simatic_pcs_7_v9.1 siemens	`cpe:2.3:a:siemens:simatic_pcs_7_v9.1:0:::::::*`	—
simatic_pdm_v9.2 siemens	`cpe:2.3:a:siemens:simatic_pdm_v9.2:0:::::::*`	—
simatic_route_control_v9.1 siemens	`cpe:2.3:a:siemens:simatic_route_control_v9.1:0:::::::*`	—
simatic_step_7_v5 siemens	`cpe:2.3:a:siemens:simatic_step_7_v5:0:::::::*`	—
simatic_wincc_oa_v3.17 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.17:0:::::::*`	—
simatic_wincc_oa_v3.18 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.18:0:::::::*`	—
simatic_wincc_oa_v3.19 siemens	`cpe:2.3:a:siemens:simatic_wincc_oa_v3.19:0:::::::*`	—
simatic_wincc_runtime_advanced siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:0:::::::*`	—
simatic_wincc_runtime_professional_v16 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v16:0:::::::*`	—
simatic_wincc_runtime_professional_v17 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17:0:::::::*`	—
simatic_wincc_runtime_professional_v18 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:0:::::::*`	—
simatic_wincc_runtime_professional_v19 siemens	`cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:0:::::::*`	—
simatic_wincc_unified_pc_runtime siemens	`cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime:0:::::::*`	—
simatic_wincc_v7.4 siemens	`cpe:2.3:a:siemens:simatic_wincc_v7.4:0:::::::*`	—
simatic_wincc_v7.5 siemens	`cpe:2.3:a:siemens:simatic_wincc_v7.5:0:::::::*`	—
simatic_wincc_v8.0 siemens	`cpe:2.3:a:siemens:simatic_wincc_v8.0:0:::::::*`	—
sinamics_startdrive siemens	`cpe:2.3:a:siemens:sinamics_startdrive:0:::::::*`	—
sinumerik_one_virtual siemens	`cpe:2.3:a:siemens:sinumerik_one_virtual:0:::::::*`	—
sinumerik_plc_programming_tool siemens	`cpe:2.3:a:siemens:sinumerik_plc_programming_tool:0:::::::*`	—
tia_portal_cloud_connector siemens	`cpe:2.3:a:siemens:tia_portal_cloud_connector:0:::::::*`	—
totally_integrated_automation_portal__tia_portal__v15.1 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v15.1:0:::::::*`	—
totally_integrated_automation_portal__tia_portal__v16 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:0:::::::*`	—
totally_integrated_automation_portal__tia_portal__v17 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:0:::::::*`	—
totally_integrated_automation_portal__tia_portal__v18 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:0:::::::*`	—
totally_integrated_automation_portal__tia_portal__v19 siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:0:::::::*`	—
totally_integrated_automation_portal siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal:16:::::::*`	—
simatic_automation_tool siemens	`cpe:2.3:a:siemens:simatic_automation_tool::::::::`	—
totally_integrated_automation_portal siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal:19:::::::*`	—
totally_integrated_automation_portal siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal:18:::::::*`	—
totally_integrated_automation_portal siemens	`cpe:2.3:a:siemens:totally_integrated_automation_portal:17:::::::*`	—
simatic_net_pc_software_v16 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v16:0:::::::*`	—
simatic_net_pc_software_v17 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v17:0:::::::*`	—
simatic_net_pc_software_v18 siemens	`cpe:2.3:a:siemens:simatic_net_pc_software_v18:0:::::::*`	—

CVE-2023-46809

CWE-208 - Observable Timing Discrepancy

CVE-2023-47038

CWE-122 - Heap-based Buffer Overflow

CVE-2023-47039

CWE-122 - Heap-based Buffer Overflow

CVE-2023-47100

CVE-2023-48795

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-222 - Truncation of Security-relevant Information

Affected products

Known affected 7 products

Product	Identifier	Version
ruggedcom_ape1808 siemens	`cpe:2.3:a:siemens:ruggedcom_ape1808::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2023-49441

CWE-190 - Integer Overflow or Wraparound

CVE-2023-50387

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-50868

CWE-400 - Uncontrolled Resource Consumption

CVE-2023-52389

CWE-121 - Stack-based Buffer Overflow

CVE-2024-0232

CWE-416 - Use After Free

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2024-0727

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
simatic_s7 siemens	`cpe:2.3:h:siemens:simatic_s7:1500:::::::*`	—
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2024-2004

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-319 - Cleartext Transmission of Sensitive Information

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
sinema_remote_connect_client siemens	`cpe:2.3:a:siemens:sinema_remote_connect_client::::::::`	—

CVE-2024-2379

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-295 - Improper Certificate Validation

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
sinema_remote_connect_client siemens	`cpe:2.3:a:siemens:sinema_remote_connect_client::::::::`	—

CVE-2024-2398

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
sinema_remote_connect_client siemens	`cpe:2.3:a:siemens:sinema_remote_connect_client::::::::`	—

CVE-2024-2466

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C

CWE-295 - Improper Certificate Validation

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
sinema_remote_connect_client siemens	`cpe:2.3:a:siemens:sinema_remote_connect_client::::::::`	—

CVE-2024-2511

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2024-4603

CWE-606 - Unchecked Input for Loop Condition

CVE-2024-4741

CWE-416 - Use After Free

CVE-2024-5535

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 6 products

Product	Identifier	Version
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_::::::::`	—
simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_ siemens	`cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_::::::::`	—
siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_ siemens	`cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_::::::::`	—
simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem siemens	`cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem::::::::`	—

CVE-2024-5594

CVE-2024-21890

CWE-275 - -

CVE-2024-21891

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2024-21892

CWE-94 - Improper Control of Generation of Code ('Code Injection')

CVE-2024-21896

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2024-22017

CWE-271 - Privilege Dropping / Lowering Errors

CVE-2024-22019

CWE-400 - Uncontrolled Resource Consumption

CVE-2024-22025

CWE-400 - Uncontrolled Resource Consumption

CVE-2024-24758

CWE-942 - Permissive Cross-domain Policy with Untrusted Domains

CVE-2024-24795

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

CVE-2024-24806

CWE-918 - Server-Side Request Forgery (SSRF)

CVE-2024-26306

CWE-310 - -

CVE-2024-26925

CWE-284 - Improper Access Control

CVE-2024-27316

CWE-400 - Uncontrolled Resource Consumption

CVE-2024-27980

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2024-27982

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVE-2024-27983

CWE-400 - Uncontrolled Resource Consumption

CVE-2024-28882

CWE-772 - Missing Release of Resource after Effective Lifetime

CVE-2024-29119

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-266 - Incorrect Privilege Assignment

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
spectrum_power_7 siemens	`cpe:2.3:a:siemens:spectrum_power_7::::::::`	—

CVE-2024-36140

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
ozw672 siemens	`cpe:2.3:a:siemens:ozw672::::::::`	—
ozw772 siemens	`cpe:2.3:a:siemens:ozw772::::::::`	—

CVE-2024-44102

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 13 products

Product	Identifier	Version
pp_telecontrol_server_basic_1000_to_5000_v3.1 siemens	`cpe:2.3:a:siemens:pp_telecontrol_server_basic_1000_to_5000_v3.1::::::::`	—
pp_telecontrol_server_basic_256_to_1000_v3.1 siemens	`cpe:2.3:a:siemens:pp_telecontrol_server_basic_256_to_1000_v3.1::::::::`	—
pp_telecontrol_server_basic_32_to_64_v3.1 siemens	`cpe:2.3:a:siemens:pp_telecontrol_server_basic_32_to_64_v3.1::::::::`	—
pp_telecontrol_server_basic_64_to_256_v3.1 siemens	`cpe:2.3:a:siemens:pp_telecontrol_server_basic_64_to_256_v3.1::::::::`	—
pp_telecontrol_server_basic_8_to_32_v3.1 siemens	`cpe:2.3:a:siemens:pp_telecontrol_server_basic_8_to_32_v3.1::::::::`	—
telecontrol_server_basic_1000_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_1000_v3.1::::::::`	—
telecontrol_server_basic_256_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_256_v3.1::::::::`	—
telecontrol_server_basic_32_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_32_v3.1::::::::`	—
telecontrol_server_basic_5000_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_5000_v3.1::::::::`	—
telecontrol_server_basic_64_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_64_v3.1::::::::`	—
telecontrol_server_basic_8_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_8_v3.1::::::::`	—
telecontrol_server_basic_serv_upgr siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_serv_upgr::::::::`	—
telecontrol_server_basic_upgr_v3.1 siemens	`cpe:2.3:a:siemens:telecontrol_server_basic_upgr_v3.1::::::::`	—

CVE-2024-46888

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-46889

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

CWE-321 - Use of Hard-coded Cryptographic Key

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-46890

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-46891

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-46892

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C

CWE-613 - Insufficient Session Expiration

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-46894

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_ins siemens	`cpe:2.3:a:siemens:sinec_ins::::::::`	—

CVE-2024-47783

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-732 - Incorrect Permission Assignment for Critical Resource

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
siport siemens	`cpe:2.3:a:siemens:siport::::::::`	—

CVE-2024-47808

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C

CWE-732 - Incorrect Permission Assignment for Critical Resource

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
sinec_nms siemens	`cpe:2.3:a:siemens:sinec_nms::::::::`	—

CVE-2024-47940

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
solid_edge_se2024 siemens	`cpe:2.3:a:siemens:solid_edge_se2024::::::::`	—

CVE-2024-47941

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-125 - Out-of-bounds Read

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
solid_edge_se2024 siemens	`cpe:2.3:a:siemens:solid_edge_se2024::::::::`	—

CVE-2024-47942

7.3 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-427 - Uncontrolled Search Path Element

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
solid_edge_se2024 siemens	`cpe:2.3:a:siemens:solid_edge_se2024::::::::`	—

CVE-2024-50310

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE-863 - Incorrect Authorization

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
simatic_cp_1543-1_v4.0 siemens	`cpe:2.3:a:siemens:simatic_cp_1543-1_v4.0::::::::`	—

CVE-2024-50313

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Known affected 5 products

Product	Identifier	Version
mendix_runtime_v10 siemens	`cpe:2.3:a:siemens:mendix_runtime_v10::::::::`	—
mendix_runtime_v10.12 siemens	`cpe:2.3:a:siemens:mendix_runtime_v10.12::::::::`	—
mendix_runtime_v10.6 siemens	`cpe:2.3:a:siemens:mendix_runtime_v10.6::::::::`	—
mendix_runtime_v8 siemens	`cpe:2.3:a:siemens:mendix_runtime_v8::::::::`	—
mendix_runtime_v9 siemens	`cpe:2.3:a:siemens:mendix_runtime_v9::::::::`	—

CVE-2024-50557

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

CVE-2024-50558

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-284 - Improper Access Control

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

CVE-2024-50559

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

CVE-2024-50560

3.1 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-20 - Improper Input Validation

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

CVE-2024-50561

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

CVE-2024-50572

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Affected products

Known affected 24 products

Product	Identifier	Version
ruggedcom_rm1224_lte_4g__eu siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu::::::::`	—
ruggedcom_rm1224_lte_4g__nam siemens	`cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam::::::::`	—
scalance_m804pb siemens	`cpe:2.3:a:siemens:scalance_m804pb::::::::`	—
scalance_m812-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m812-1_adsl-router::::::::`	—
scalance_m816-1_adsl-router siemens	`cpe:2.3:a:siemens:scalance_m816-1_adsl-router::::::::`	—
scalance_m826-2_shdsl-router siemens	`cpe:2.3:a:siemens:scalance_m826-2_shdsl-router::::::::`	—
scalance_m874-2 siemens	`cpe:2.3:a:siemens:scalance_m874-2::::::::`	—
scalance_m874-3 siemens	`cpe:2.3:a:siemens:scalance_m874-3::::::::`	—
scalance_m874-3_3g-router__cn_ siemens	`cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_::::::::`	—
scalance_m876-3 siemens	`cpe:2.3:a:siemens:scalance_m876-3::::::::`	—
scalance_m876-3__rok_ siemens	`cpe:2.3:a:siemens:scalance_m876-3__rok_::::::::`	—
scalance_m876-4 siemens	`cpe:2.3:a:siemens:scalance_m876-4::::::::`	—
scalance_m876-4__eu_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__eu_::::::::`	—
scalance_m876-4__nam_ siemens	`cpe:2.3:a:siemens:scalance_m876-4__nam_::::::::`	—
scalance_mum853-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__a1_::::::::`	—
scalance_mum853-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__b1_::::::::`	—
scalance_mum853-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum853-1__eu_::::::::`	—
scalance_mum856-1__a1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__a1_::::::::`	—
scalance_mum856-1__b1_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__b1_::::::::`	—
scalance_mum856-1__cn_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__cn_::::::::`	—
scalance_mum856-1__eu_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__eu_::::::::`	—
scalance_mum856-1__row_ siemens	`cpe:2.3:a:siemens:scalance_mum856-1__row_::::::::`	—
scalance_s615_eec_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_eec_lan-router::::::::`	—
scalance_s615_lan-router siemens	`cpe:2.3:a:siemens:scalance_s615_lan-router::::::::`	—

References

108 references

URL	Category
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://cert-portal.siemens.com/productcert/pdf/s…	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2021…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Cross-Site-Scripting (XSS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Unchecked Input for Loop Condition",
        "title": "CWE-606"
      },
      {
        "category": "general",
        "text": "Use of a Cryptographic Primitive with a Risky Implementation",
        "title": "CWE-1240"
      },
      {
        "category": "general",
        "text": "Misinterpretation of Input",
        "title": "CWE-115"
      },
      {
        "category": "general",
        "text": "Insufficient Technical Documentation",
        "title": "CWE-1059"
      },
      {
        "category": "general",
        "text": "Improperly Controlled Sequential Memory Allocation",
        "title": "CWE-1325"
      },
      {
        "category": "general",
        "text": "Truncation of Security-relevant Information",
        "title": "CWE-222"
      },
      {
        "category": "general",
        "text": "CWE-310",
        "title": "CWE-310"
      },
      {
        "category": "general",
        "text": "Use of Weak Hash",
        "title": "CWE-328"
      },
      {
        "category": "general",
        "text": "Improper Validation of Specified Quantity in Input",
        "title": "CWE-1284"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information Due to Incompatible Policies",
        "title": "CWE-213"
      },
      {
        "category": "general",
        "text": "Policy Privileges are not Assigned Consistently Between Control and Data Agents",
        "title": "CWE-1268"
      },
      {
        "category": "general",
        "text": "Incorrect Provision of Specified Functionality",
        "title": "CWE-684"
      },
      {
        "category": "general",
        "text": "Missing Release of Resource after Effective Lifetime",
        "title": "CWE-772"
      },
      {
        "category": "general",
        "text": "Observable Timing Discrepancy",
        "title": "CWE-208"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information Into Sent Data",
        "title": "CWE-201"
      },
      {
        "category": "general",
        "text": "Excessive Iteration",
        "title": "CWE-834"
      },
      {
        "category": "general",
        "text": "Incorrect Privilege Assignment",
        "title": "CWE-266"
      },
      {
        "category": "general",
        "text": "Permissive Cross-domain Policy with Untrusted Domains",
        "title": "CWE-942"
      },
      {
        "category": "general",
        "text": "Privilege Dropping / Lowering Errors",
        "title": "CWE-271"
      },
      {
        "category": "general",
        "text": "Incorrect Permission Assignment for Critical Resource",
        "title": "CWE-732"
      },
      {
        "category": "general",
        "text": "Improper Locking",
        "title": "CWE-667"
      },
      {
        "category": "general",
        "text": "Expected Behavior Violation",
        "title": "CWE-440"
      },
      {
        "category": "general",
        "text": "Improper Validation of Certificate with Host Mismatch",
        "title": "CWE-297"
      },
      {
        "category": "general",
        "text": "Missing Encryption of Sensitive Data",
        "title": "CWE-311"
      },
      {
        "category": "general",
        "text": "Improper Check for Unusual or Exceptional Conditions",
        "title": "CWE-754"
      },
      {
        "category": "general",
        "text": "Reachable Assertion",
        "title": "CWE-617"
      },
      {
        "category": "general",
        "text": "Uncontrolled Search Path Element",
        "title": "CWE-427"
      },
      {
        "category": "general",
        "text": "Cleartext Transmission of Sensitive Information",
        "title": "CWE-319"
      },
      {
        "category": "general",
        "text": "Insufficient Session Expiration",
        "title": "CWE-613"
      },
      {
        "category": "general",
        "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
        "title": "CWE-444"
      },
      {
        "category": "general",
        "text": "Observable Discrepancy",
        "title": "CWE-203"
      },
      {
        "category": "general",
        "text": "Improper Validation of Integrity Check Value",
        "title": "CWE-354"
      },
      {
        "category": "general",
        "text": "Missing Cryptographic Step",
        "title": "CWE-325"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Cryptographic Key",
        "title": "CWE-321"
      },
      {
        "category": "general",
        "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
        "title": "CWE-362"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Resource Shutdown or Release",
        "title": "CWE-404"
      },
      {
        "category": "general",
        "text": "CWE-275",
        "title": "CWE-275"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Inefficient Regular Expression Complexity",
        "title": "CWE-1333"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
        "title": "CWE-113"
      },
      {
        "category": "general",
        "text": "Missing Release of Memory after Effective Lifetime",
        "title": "CWE-401"
      },
      {
        "category": "general",
        "text": "NULL Pointer Dereference",
        "title": "CWE-476"
      },
      {
        "category": "general",
        "text": "Improper Certificate Validation",
        "title": "CWE-295"
      },
      {
        "category": "general",
        "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)",
        "title": "CWE-757"
      },
      {
        "category": "general",
        "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
        "title": "CWE-94"
      },
      {
        "category": "general",
        "text": "Use of a Broken or Risky Cryptographic Algorithm",
        "title": "CWE-327"
      },
      {
        "category": "general",
        "text": "Interpretation Conflict",
        "title": "CWE-436"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Allocation of Resources Without Limits or Throttling",
        "title": "CWE-770"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
        "title": "CWE-74"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Server-Side Request Forgery (SSRF)",
        "title": "CWE-918"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Memory Allocation with Excessive Size Value",
        "title": "CWE-789"
      },
      {
        "category": "general",
        "text": "Improper Privilege Management",
        "title": "CWE-269"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Authentication",
        "title": "CWE-287"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-000297.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-064257.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-230445.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-331112.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-351178.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-354112.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-454789.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-616032.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-654798.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-871035.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-914892.pdf"
      },
      {
        "category": "external",
        "summary": "Reference - ncscclear",
        "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-915275.pdf"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Siemens producten",
    "tracking": {
      "current_release_date": "2024-11-12T14:19:20.051128Z",
      "id": "NCSC-2024-0433",
      "initial_release_date": "2024-11-12T14:19:20.051128Z",
      "revision_history": [
        {
          "date": "2024-11-12T14:19:20.051128Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "mendix_runtime_v10.12",
            "product": {
              "name": "mendix_runtime_v10.12",
              "product_id": "CSAFPID-1637623",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.12:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "mendix_runtime_v10.6",
            "product": {
              "name": "mendix_runtime_v10.6",
              "product_id": "CSAFPID-1637624",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10.6:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "mendix_runtime_v10",
            "product": {
              "name": "mendix_runtime_v10",
              "product_id": "CSAFPID-1637622",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:mendix_runtime_v10:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "mendix_runtime_v8",
            "product": {
              "name": "mendix_runtime_v8",
              "product_id": "CSAFPID-1637625",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:mendix_runtime_v8:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "mendix_runtime_v9",
            "product": {
              "name": "mendix_runtime_v9",
              "product_id": "CSAFPID-1637626",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:mendix_runtime_v9:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ozw672",
            "product": {
              "name": "ozw672",
              "product_id": "CSAFPID-1712832",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:ozw672:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ozw772",
            "product": {
              "name": "ozw772",
              "product_id": "CSAFPID-1712833",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:ozw772:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "pp_telecontrol_server_basic_1000_to_5000_v3.1",
            "product": {
              "name": "pp_telecontrol_server_basic_1000_to_5000_v3.1",
              "product_id": "CSAFPID-1712834",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:pp_telecontrol_server_basic_1000_to_5000_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "pp_telecontrol_server_basic_256_to_1000_v3.1",
            "product": {
              "name": "pp_telecontrol_server_basic_256_to_1000_v3.1",
              "product_id": "CSAFPID-1712835",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:pp_telecontrol_server_basic_256_to_1000_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "pp_telecontrol_server_basic_32_to_64_v3.1",
            "product": {
              "name": "pp_telecontrol_server_basic_32_to_64_v3.1",
              "product_id": "CSAFPID-1712836",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:pp_telecontrol_server_basic_32_to_64_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "pp_telecontrol_server_basic_64_to_256_v3.1",
            "product": {
              "name": "pp_telecontrol_server_basic_64_to_256_v3.1",
              "product_id": "CSAFPID-1712837",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:pp_telecontrol_server_basic_64_to_256_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "pp_telecontrol_server_basic_8_to_32_v3.1",
            "product": {
              "name": "pp_telecontrol_server_basic_8_to_32_v3.1",
              "product_id": "CSAFPID-1712838",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:pp_telecontrol_server_basic_8_to_32_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ruggedcom_ape1808",
            "product": {
              "name": "ruggedcom_ape1808",
              "product_id": "CSAFPID-1615259",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:ruggedcom_ape1808:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ruggedcom_rm1224_lte_4g__eu",
            "product": {
              "name": "ruggedcom_rm1224_lte_4g__eu",
              "product_id": "CSAFPID-1702670",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__eu:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ruggedcom_rm1224_lte_4g__nam",
            "product": {
              "name": "ruggedcom_rm1224_lte_4g__nam",
              "product_id": "CSAFPID-1702671",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:ruggedcom_rm1224_lte_4g__nam:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "s7-pct",
            "product": {
              "name": "s7-pct",
              "product_id": "CSAFPID-1637909",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:s7-pct:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "s7-pct",
            "product": {
              "name": "s7-pct",
              "product_id": "CSAFPID-1470060",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:s7-pct:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "s7_port_configuration_tool",
            "product": {
              "name": "s7_port_configuration_tool",
              "product_id": "CSAFPID-1472074",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:s7_port_configuration_tool:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m804pb",
            "product": {
              "name": "scalance_m804pb",
              "product_id": "CSAFPID-1702672",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m804pb:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m812-1_adsl-router",
            "product": {
              "name": "scalance_m812-1_adsl-router",
              "product_id": "CSAFPID-1712749",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m812-1_adsl-router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m816-1_adsl-router",
            "product": {
              "name": "scalance_m816-1_adsl-router",
              "product_id": "CSAFPID-1712750",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m816-1_adsl-router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m826-2_shdsl-router",
            "product": {
              "name": "scalance_m826-2_shdsl-router",
              "product_id": "CSAFPID-1702677",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m826-2_shdsl-router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m874-2",
            "product": {
              "name": "scalance_m874-2",
              "product_id": "CSAFPID-1702678",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m874-2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m874-3",
            "product": {
              "name": "scalance_m874-3",
              "product_id": "CSAFPID-1702679",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m874-3:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m874-3_3g-router__cn_",
            "product": {
              "name": "scalance_m874-3_3g-router__cn_",
              "product_id": "CSAFPID-1712751",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m874-3_3g-router__cn_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m876-3",
            "product": {
              "name": "scalance_m876-3",
              "product_id": "CSAFPID-1712752",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m876-3:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m876-3__rok_",
            "product": {
              "name": "scalance_m876-3__rok_",
              "product_id": "CSAFPID-1702681",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m876-3__rok_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m876-4",
            "product": {
              "name": "scalance_m876-4",
              "product_id": "CSAFPID-1712753",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m876-4:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m876-4__eu_",
            "product": {
              "name": "scalance_m876-4__eu_",
              "product_id": "CSAFPID-1702682",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m876-4__eu_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_m876-4__nam_",
            "product": {
              "name": "scalance_m876-4__nam_",
              "product_id": "CSAFPID-1702683",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_m876-4__nam_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum853-1__a1_",
            "product": {
              "name": "scalance_mum853-1__a1_",
              "product_id": "CSAFPID-1712754",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum853-1__a1_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum853-1__b1_",
            "product": {
              "name": "scalance_mum853-1__b1_",
              "product_id": "CSAFPID-1712755",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum853-1__b1_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum853-1__eu_",
            "product": {
              "name": "scalance_mum853-1__eu_",
              "product_id": "CSAFPID-1712756",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum853-1__eu_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum856-1__a1_",
            "product": {
              "name": "scalance_mum856-1__a1_",
              "product_id": "CSAFPID-1712757",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum856-1__a1_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum856-1__b1_",
            "product": {
              "name": "scalance_mum856-1__b1_",
              "product_id": "CSAFPID-1712758",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum856-1__b1_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum856-1__cn_",
            "product": {
              "name": "scalance_mum856-1__cn_",
              "product_id": "CSAFPID-1712759",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum856-1__cn_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum856-1__eu_",
            "product": {
              "name": "scalance_mum856-1__eu_",
              "product_id": "CSAFPID-1702684",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum856-1__eu_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_mum856-1__row_",
            "product": {
              "name": "scalance_mum856-1__row_",
              "product_id": "CSAFPID-1702685",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_mum856-1__row_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_s615_eec_lan-router",
            "product": {
              "name": "scalance_s615_eec_lan-router",
              "product_id": "CSAFPID-1712760",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_s615_eec_lan-router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_s615_lan-router",
            "product": {
              "name": "scalance_s615_lan-router",
              "product_id": "CSAFPID-1712761",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_s615_lan-router:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xch328__6gk5328-4ts01-2ec2_",
            "product": {
              "name": "scalance_xch328__6gk5328-4ts01-2ec2_",
              "product_id": "CSAFPID-1613504",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xch328__6gk5328-4ts01-2ec2_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xcm324__6gk5324-8ts01-2ac2_",
            "product": {
              "name": "scalance_xcm324__6gk5324-8ts01-2ac2_",
              "product_id": "CSAFPID-1613505",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xcm324__6gk5324-8ts01-2ac2_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xcm328__6gk5328-4ts01-2ac2_",
            "product": {
              "name": "scalance_xcm328__6gk5328-4ts01-2ac2_",
              "product_id": "CSAFPID-1613506",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xcm328__6gk5328-4ts01-2ac2_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xcm332__6gk5332-0ga01-2ac2_",
            "product": {
              "name": "scalance_xcm332__6gk5332-0ga01-2ac2_",
              "product_id": "CSAFPID-1613507",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xcm332__6gk5332-0ga01-2ac2_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_",
            "product": {
              "name": "scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_",
              "product_id": "CSAFPID-1613592",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrh334__24_v_dc__8xfo__cc___6gk5334-2ts01-2er3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_",
            "product": {
              "name": "scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_",
              "product_id": "CSAFPID-1613593",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__230_v_ac__12xfo___6gk5334-3ts01-3ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_",
            "product": {
              "name": "scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_",
              "product_id": "CSAFPID-1613594",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__230_v_ac__8xfo___6gk5334-2ts01-3ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_",
            "product": {
              "name": "scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_",
              "product_id": "CSAFPID-1613595",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__24_v_dc__12xfo___6gk5334-3ts01-2ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_",
            "product": {
              "name": "scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_",
              "product_id": "CSAFPID-1613596",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__24_v_dc__8xfo___6gk5334-2ts01-2ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_",
            "product": {
              "name": "scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_",
              "product_id": "CSAFPID-1613597",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__2x230_v_ac__12xfo___6gk5334-3ts01-4ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_",
            "product": {
              "name": "scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_",
              "product_id": "CSAFPID-1613598",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:scalance_xrm334__2x230_v_ac__8xfo___6gk5334-2ts01-4ar3_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "security_configuration_tool",
            "product": {
              "name": "security_configuration_tool",
              "product_id": "CSAFPID-1625339",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:security_configuration_tool:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "security_configuration_tool__sct_",
            "product": {
              "name": "security_configuration_tool__sct_",
              "product_id": "CSAFPID-1637910",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:security_configuration_tool__sct_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "security_configuration_tool__sct_",
            "product": {
              "name": "security_configuration_tool__sct_",
              "product_id": "CSAFPID-1470061",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:security_configuration_tool__sct_:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_automation_tool",
            "product": {
              "name": "simatic_automation_tool",
              "product_id": "CSAFPID-1472069",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_automation_tool:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_automation_tool",
            "product": {
              "name": "simatic_automation_tool",
              "product_id": "CSAFPID-1637559",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_automation_tool:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_automation_tool",
            "product": {
              "name": "simatic_automation_tool",
              "product_id": "CSAFPID-1470062",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_automation_tool:all_versions:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_batch_v9.1",
            "product": {
              "name": "simatic_batch_v9.1",
              "product_id": "CSAFPID-1625340",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_batch_v9.1",
            "product": {
              "name": "simatic_batch_v9.1",
              "product_id": "CSAFPID-1470063",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_batch_v9.1:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_cp_1543-1_v4.0",
            "product": {
              "name": "simatic_cp_1543-1_v4.0",
              "product_id": "CSAFPID-1712748",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_cp_1543-1_v4.0:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_mv500_family",
            "product": {
              "name": "simatic_mv500_family",
              "product_id": "CSAFPID-1703073",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_mv500_family:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc-software",
            "product": {
              "name": "simatic_net_pc-software",
              "product_id": "CSAFPID-1625344",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc-software:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software",
            "product": {
              "name": "simatic_net_pc_software",
              "product_id": "CSAFPID-1470064",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v16",
            "product": {
              "name": "simatic_net_pc_software_v16",
              "product_id": "CSAFPID-1637849",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v16",
            "product": {
              "name": "simatic_net_pc_software_v16",
              "product_id": "CSAFPID-1457906",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v16:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v17",
            "product": {
              "name": "simatic_net_pc_software_v17",
              "product_id": "CSAFPID-1637850",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v17",
            "product": {
              "name": "simatic_net_pc_software_v17",
              "product_id": "CSAFPID-1457907",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v17:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v18",
            "product": {
              "name": "simatic_net_pc_software_v18",
              "product_id": "CSAFPID-1637851",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v18",
            "product": {
              "name": "simatic_net_pc_software_v18",
              "product_id": "CSAFPID-1457908",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v18:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v19",
            "product": {
              "name": "simatic_net_pc_software_v19",
              "product_id": "CSAFPID-1637911",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v19:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software_v19",
            "product": {
              "name": "simatic_net_pc_software_v19",
              "product_id": "CSAFPID-1637560",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_net_pc_software_v19:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pcs",
            "product": {
              "name": "simatic_pcs",
              "product_id": "CSAFPID-838530",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_pcs:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pcs_7_v9.1",
            "product": {
              "name": "simatic_pcs_7_v9.1",
              "product_id": "CSAFPID-1501190",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pcs_7_v9.1",
            "product": {
              "name": "simatic_pcs_7_v9.1",
              "product_id": "CSAFPID-1457909",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_pcs_7_v9.1:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pdm_v9.2",
            "product": {
              "name": "simatic_pdm_v9.2",
              "product_id": "CSAFPID-1637912",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_pdm_v9.2:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pdm_v9.2",
            "product": {
              "name": "simatic_pdm_v9.2",
              "product_id": "CSAFPID-1470065",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_pdm_v9.2:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_route_control_",
            "product": {
              "name": "simatic_route_control_",
              "product_id": "CSAFPID-1625337",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_route_control_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_route_control_v9.1",
            "product": {
              "name": "simatic_route_control_v9.1",
              "product_id": "CSAFPID-1637856",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_route_control_v9.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_route_control_v9.1",
            "product": {
              "name": "simatic_route_control_v9.1",
              "product_id": "CSAFPID-1470066",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_route_control_v9.1:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager",
            "product": {
              "name": "simatic_rtls_locating_manager",
              "product_id": "CSAFPID-1691398",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager:3.0.1.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-0da00_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-0da00_",
              "product_id": "CSAFPID-1703180",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da00_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-0da10_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-0da10_",
              "product_id": "CSAFPID-1703181",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da10_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-0da20_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-0da20_",
              "product_id": "CSAFPID-1703182",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da20_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-0da30_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-0da30_",
              "product_id": "CSAFPID-1703183",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-0da30_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-1ea10_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-1ea10_",
              "product_id": "CSAFPID-1703184",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea10_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-1ea20_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-1ea20_",
              "product_id": "CSAFPID-1703185",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea20_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_rtls_locating_manager__6gt2780-1ea30_",
            "product": {
              "name": "simatic_rtls_locating_manager__6gt2780-1ea30_",
              "product_id": "CSAFPID-1703186",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_rtls_locating_manager__6gt2780-1ea30_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_",
            "product": {
              "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_",
              "product_id": "CSAFPID-1615260",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ab0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_",
            "product": {
              "name": "simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_",
              "product_id": "CSAFPID-1615261",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518-4_pn_dp_mfp__6es7518-4ax00-1ac0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_",
            "product": {
              "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_",
              "product_id": "CSAFPID-1615262",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ab0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_",
            "product": {
              "name": "simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_",
              "product_id": "CSAFPID-1615263",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_cpu_1518f-4_pn_dp_mfp__6es7518-4fx00-1ac0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem",
            "product": {
              "name": "simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem",
              "product_id": "CSAFPID-1703131",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-1500_tm_mfp_-_gnu_linux_subsystem:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-plcsim_v16",
            "product": {
              "name": "simatic_s7-plcsim_v16",
              "product_id": "CSAFPID-1712825",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-plcsim_v17",
            "product": {
              "name": "simatic_s7-plcsim_v17",
              "product_id": "CSAFPID-1712826",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_safety_v16",
            "product": {
              "name": "simatic_step_7_safety_v16",
              "product_id": "CSAFPID-1703190",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_safety_v17",
            "product": {
              "name": "simatic_step_7_safety_v17",
              "product_id": "CSAFPID-1703191",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_safety_v18",
            "product": {
              "name": "simatic_step_7_safety_v18",
              "product_id": "CSAFPID-1500667",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_v16",
            "product": {
              "name": "simatic_step_7_v16",
              "product_id": "CSAFPID-1703187",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_v17",
            "product": {
              "name": "simatic_step_7_v17",
              "product_id": "CSAFPID-1703188",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_v18",
            "product": {
              "name": "simatic_step_7_v18",
              "product_id": "CSAFPID-1703189",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_v5",
            "product": {
              "name": "simatic_step_7_v5",
              "product_id": "CSAFPID-1637913",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_v5:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7_v5",
            "product": {
              "name": "simatic_step_7_v5",
              "product_id": "CSAFPID-1457855",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_step_7_v5:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc",
            "product": {
              "name": "simatic_wincc",
              "product_id": "CSAFPID-75563",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc",
            "product": {
              "name": "simatic_wincc",
              "product_id": "CSAFPID-1550826",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc:8.0:update_5:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.17",
            "product": {
              "name": "simatic_wincc_oa_v3.17",
              "product_id": "CSAFPID-1637914",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.17",
            "product": {
              "name": "simatic_wincc_oa_v3.17",
              "product_id": "CSAFPID-1457956",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.17:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.18",
            "product": {
              "name": "simatic_wincc_oa_v3.18",
              "product_id": "CSAFPID-1637915",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.18",
            "product": {
              "name": "simatic_wincc_oa_v3.18",
              "product_id": "CSAFPID-1457957",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.18:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.19",
            "product": {
              "name": "simatic_wincc_oa_v3.19",
              "product_id": "CSAFPID-1637916",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.19:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa_v3.19",
            "product": {
              "name": "simatic_wincc_oa_v3.19",
              "product_id": "CSAFPID-1457958",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_oa_v3.19:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_advanced",
            "product": {
              "name": "simatic_wincc_runtime_advanced",
              "product_id": "CSAFPID-766087",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_advanced",
            "product": {
              "name": "simatic_wincc_runtime_advanced",
              "product_id": "CSAFPID-1470067",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional",
            "product": {
              "name": "simatic_wincc_runtime_professional",
              "product_id": "CSAFPID-165765",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v16",
            "product": {
              "name": "simatic_wincc_runtime_professional_v16",
              "product_id": "CSAFPID-1637917",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v16",
            "product": {
              "name": "simatic_wincc_runtime_professional_v16",
              "product_id": "CSAFPID-1457960",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v16:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v17",
            "product": {
              "name": "simatic_wincc_runtime_professional_v17",
              "product_id": "CSAFPID-1637887",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v17",
            "product": {
              "name": "simatic_wincc_runtime_professional_v17",
              "product_id": "CSAFPID-1457961",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v17:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v18",
            "product": {
              "name": "simatic_wincc_runtime_professional_v18",
              "product_id": "CSAFPID-1501188",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v18",
            "product": {
              "name": "simatic_wincc_runtime_professional_v18",
              "product_id": "CSAFPID-1457962",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v18:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v19",
            "product": {
              "name": "simatic_wincc_runtime_professional_v19",
              "product_id": "CSAFPID-1501192",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional_v19",
            "product": {
              "name": "simatic_wincc_runtime_professional_v19",
              "product_id": "CSAFPID-1457963",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_runtime_professional_v19:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_pc_runtime",
            "product": {
              "name": "simatic_wincc_unified_pc_runtime",
              "product_id": "CSAFPID-744621",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_pc_runtime",
            "product": {
              "name": "simatic_wincc_unified_pc_runtime",
              "product_id": "CSAFPID-1470068",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_pc_runtime_v18",
            "product": {
              "name": "simatic_wincc_unified_pc_runtime_v18",
              "product_id": "CSAFPID-1637854",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_pc_runtime_v18",
            "product": {
              "name": "simatic_wincc_unified_pc_runtime_v18",
              "product_id": "CSAFPID-1637561",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v18:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_v16",
            "product": {
              "name": "simatic_wincc_unified_v16",
              "product_id": "CSAFPID-1703192",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_v17",
            "product": {
              "name": "simatic_wincc_unified_v17",
              "product_id": "CSAFPID-1703193",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_unified_v18",
            "product": {
              "name": "simatic_wincc_unified_v18",
              "product_id": "CSAFPID-1703194",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v16",
            "product": {
              "name": "simatic_wincc_v16",
              "product_id": "CSAFPID-1702687",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v17",
            "product": {
              "name": "simatic_wincc_v17",
              "product_id": "CSAFPID-1702688",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v18",
            "product": {
              "name": "simatic_wincc_v18",
              "product_id": "CSAFPID-1703195",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v7.4",
            "product": {
              "name": "simatic_wincc_v7.4",
              "product_id": "CSAFPID-1501193",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v7.4",
            "product": {
              "name": "simatic_wincc_v7.4",
              "product_id": "CSAFPID-1457965",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.4:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v7.5",
            "product": {
              "name": "simatic_wincc_v7.5",
              "product_id": "CSAFPID-1501191",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v7.5",
            "product": {
              "name": "simatic_wincc_v7.5",
              "product_id": "CSAFPID-1457966",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v7.5:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v8.0",
            "product": {
              "name": "simatic_wincc_v8.0",
              "product_id": "CSAFPID-1501189",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_v8.0",
            "product": {
              "name": "simatic_wincc_v8.0",
              "product_id": "CSAFPID-1457967",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simatic_wincc_v8.0:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simocode_es_v16",
            "product": {
              "name": "simocode_es_v16",
              "product_id": "CSAFPID-1702694",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simocode_es_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simocode_es_v17",
            "product": {
              "name": "simocode_es_v17",
              "product_id": "CSAFPID-1703196",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simocode_es_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simocode_es_v18",
            "product": {
              "name": "simocode_es_v18",
              "product_id": "CSAFPID-1703197",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simocode_es_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simotion_scout_tia_v5.4_sp1",
            "product": {
              "name": "simotion_scout_tia_v5.4_sp1",
              "product_id": "CSAFPID-1703198",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simotion_scout_tia_v5.4_sp3",
            "product": {
              "name": "simotion_scout_tia_v5.4_sp3",
              "product_id": "CSAFPID-1703199",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp3:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simotion_scout_tia_v5.5_sp1",
            "product": {
              "name": "simotion_scout_tia_v5.5_sp1",
              "product_id": "CSAFPID-1703200",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.5_sp1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinamics_startdrive",
            "product": {
              "name": "sinamics_startdrive",
              "product_id": "CSAFPID-1625341",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinamics_startdrive:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinamics_startdrive",
            "product": {
              "name": "sinamics_startdrive",
              "product_id": "CSAFPID-1470069",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinamics_startdrive:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinamics_startdrive_v16",
            "product": {
              "name": "sinamics_startdrive_v16",
              "product_id": "CSAFPID-1703201",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinamics_startdrive_v17",
            "product": {
              "name": "sinamics_startdrive_v17",
              "product_id": "CSAFPID-1703202",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinamics_startdrive_v18",
            "product": {
              "name": "sinamics_startdrive_v18",
              "product_id": "CSAFPID-1703203",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_ins",
            "product": {
              "name": "sinec_ins",
              "product_id": "CSAFPID-746925",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_network_management_system",
            "product": {
              "name": "sinec_network_management_system",
              "product_id": "CSAFPID-1691397",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_network_management_system:2.0:sp1:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_nms",
            "product": {
              "name": "sinec_nms",
              "product_id": "CSAFPID-309392",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_nms:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_nms",
            "product": {
              "name": "sinec_nms",
              "product_id": "CSAFPID-1458012",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_nms:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_nms",
            "product": {
              "name": "sinec_nms",
              "product_id": "CSAFPID-1693062",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_nms:2.0:sp2:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinec_nms",
            "product": {
              "name": "sinec_nms",
              "product_id": "CSAFPID-1691473",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinec_nms:3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinema_remote_connect_client",
            "product": {
              "name": "sinema_remote_connect_client",
              "product_id": "CSAFPID-894438",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinema_remote_connect_client:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinumerik_one_virtual",
            "product": {
              "name": "sinumerik_one_virtual",
              "product_id": "CSAFPID-1625342",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinumerik_one_virtual:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinumerik_one_virtual",
            "product": {
              "name": "sinumerik_one_virtual",
              "product_id": "CSAFPID-1470070",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinumerik_one_virtual:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinumerik_plc_programming_tool",
            "product": {
              "name": "sinumerik_plc_programming_tool",
              "product_id": "CSAFPID-1625338",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinumerik_plc_programming_tool:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sinumerik_plc_programming_tool",
            "product": {
              "name": "sinumerik_plc_programming_tool",
              "product_id": "CSAFPID-1470071",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sinumerik_plc_programming_tool:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_",
            "product": {
              "name": "siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_",
              "product_id": "CSAFPID-1615264",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:siplus_s7-1500_cpu_1518-4_pn_dp_mfp__6ag1518-4ax00-4ac0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siport",
            "product": {
              "name": "siport",
              "product_id": "CSAFPID-1712847",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:siport:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sirius_safety_es_v17",
            "product": {
              "name": "sirius_safety_es_v17",
              "product_id": "CSAFPID-1703204",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sirius_safety_es_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sirius_safety_es_v18",
            "product": {
              "name": "sirius_safety_es_v18",
              "product_id": "CSAFPID-1703205",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sirius_safety_es_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sirius_soft_starter_es_v17",
            "product": {
              "name": "sirius_soft_starter_es_v17",
              "product_id": "CSAFPID-1703206",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sirius_soft_starter_es_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "sirius_soft_starter_es_v18",
            "product": {
              "name": "sirius_soft_starter_es_v18",
              "product_id": "CSAFPID-1703207",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:sirius_soft_starter_es_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "solid_edge_se2024",
            "product": {
              "name": "solid_edge_se2024",
              "product_id": "CSAFPID-1680248",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:solid_edge_se2024:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "spectrum_power_7",
            "product": {
              "name": "spectrum_power_7",
              "product_id": "CSAFPID-524281",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:spectrum_power_7:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "st7_scadaconnect",
            "product": {
              "name": "st7_scadaconnect",
              "product_id": "CSAFPID-1691077",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:st7_scadaconnect:1.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "st7_scadaconnect__6nh7997-5da10-0aa0_",
            "product": {
              "name": "st7_scadaconnect__6nh7997-5da10-0aa0_",
              "product_id": "CSAFPID-1703173",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:st7_scadaconnect__6nh7997-5da10-0aa0_:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic",
            "product": {
              "name": "telecontrol_server_basic",
              "product_id": "CSAFPID-1691051",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic:3.1.2:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_1000_v3.1",
            "product": {
              "name": "telecontrol_server_basic_1000_v3.1",
              "product_id": "CSAFPID-1712839",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_1000_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_256_v3.1",
            "product": {
              "name": "telecontrol_server_basic_256_v3.1",
              "product_id": "CSAFPID-1712840",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_256_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_32_v3.1",
            "product": {
              "name": "telecontrol_server_basic_32_v3.1",
              "product_id": "CSAFPID-1712841",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_32_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_5000_v3.1",
            "product": {
              "name": "telecontrol_server_basic_5000_v3.1",
              "product_id": "CSAFPID-1712842",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_5000_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_64_v3.1",
            "product": {
              "name": "telecontrol_server_basic_64_v3.1",
              "product_id": "CSAFPID-1712843",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_64_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_8_v3.1",
            "product": {
              "name": "telecontrol_server_basic_8_v3.1",
              "product_id": "CSAFPID-1712844",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_8_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_serv_upgr",
            "product": {
              "name": "telecontrol_server_basic_serv_upgr",
              "product_id": "CSAFPID-1712845",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_serv_upgr:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_upgr_v3.1",
            "product": {
              "name": "telecontrol_server_basic_upgr_v3.1",
              "product_id": "CSAFPID-1712846",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_upgr_v3.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "telecontrol_server_basic_v3",
            "product": {
              "name": "telecontrol_server_basic_v3",
              "product_id": "CSAFPID-1637855",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:telecontrol_server_basic_v3:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "tia_portal_cloud_connector",
            "product": {
              "name": "tia_portal_cloud_connector",
              "product_id": "CSAFPID-1625345",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:tia_portal_cloud_connector:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "tia_portal_cloud_connector",
            "product": {
              "name": "tia_portal_cloud_connector",
              "product_id": "CSAFPID-1470072",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:tia_portal_cloud_connector:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "tia_portal_cloud_v16",
            "product": {
              "name": "tia_portal_cloud_v16",
              "product_id": "CSAFPID-1712827",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "tia_portal_cloud_v17",
            "product": {
              "name": "tia_portal_cloud_v17",
              "product_id": "CSAFPID-1712828",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "tia_portal_cloud_v18",
            "product": {
              "name": "tia_portal_cloud_v18",
              "product_id": "CSAFPID-1712829",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal",
            "product": {
              "name": "totally_integrated_automation_portal",
              "product_id": "CSAFPID-74798",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal:15.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal",
            "product": {
              "name": "totally_integrated_automation_portal",
              "product_id": "CSAFPID-75533",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal:16:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal",
            "product": {
              "name": "totally_integrated_automation_portal",
              "product_id": "CSAFPID-74794",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal:17:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal",
            "product": {
              "name": "totally_integrated_automation_portal",
              "product_id": "CSAFPID-74792",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal:18:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal",
            "product": {
              "name": "totally_integrated_automation_portal",
              "product_id": "CSAFPID-1472073",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal:19:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v15.1",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v15.1",
              "product_id": "CSAFPID-1615531",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v15.1:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v15.1",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v15.1",
              "product_id": "CSAFPID-1458014",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v15.1:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v16",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v16",
              "product_id": "CSAFPID-1615256",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v16",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v16",
              "product_id": "CSAFPID-1458015",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v16:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v17",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v17",
              "product_id": "CSAFPID-1615257",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v17",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v17",
              "product_id": "CSAFPID-1458016",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v17:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v18",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v18",
              "product_id": "CSAFPID-1615258",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v18",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v18",
              "product_id": "CSAFPID-1458017",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v18:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v19",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v19",
              "product_id": "CSAFPID-1637618",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "totally_integrated_automation_portal__tia_portal__v19",
            "product": {
              "name": "totally_integrated_automation_portal__tia_portal__v19",
              "product_id": "CSAFPID-1470073",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:totally_integrated_automation_portal__tia_portal__v19:0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wincc",
            "product": {
              "name": "wincc",
              "product_id": "CSAFPID-1625343",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:wincc:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "wincc_tia_portal",
            "product": {
              "name": "wincc_tia_portal",
              "product_id": "CSAFPID-465667",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:siemens:wincc_tia_portal:11.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500",
            "product": {
              "name": "simatic_s7-1500",
              "product_id": "CSAFPID-715650",
              "product_identification_helper": {
                "cpe": "cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7",
            "product": {
              "name": "simatic_s7",
              "product_id": "CSAFPID-1613729",
              "product_identification_helper": {
                "cpe": "cpe:2.3:h:siemens:simatic_s7:1500:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "cpu_1518f-4_pn\\/dp_mfp_firmware",
            "product": {
              "name": "cpu_1518f-4_pn\\/dp_mfp_firmware",
              "product_id": "CSAFPID-1691401",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:cpu_1518f-4_pn\\/dp_mfp_firmware:3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "cpu_1518f-4_pn__dp_mfp_firmware",
            "product": {
              "name": "cpu_1518f-4_pn__dp_mfp_firmware",
              "product_id": "CSAFPID-715649",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:cpu_1518f-4_pn__dp_mfp_firmware:3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ruggedcom_ape1808",
            "product": {
              "name": "ruggedcom_ape1808",
              "product_id": "CSAFPID-880853",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:ruggedcom_ape1808:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "ruggedcom_ape1808_firmware",
            "product": {
              "name": "ruggedcom_ape1808_firmware",
              "product_id": "CSAFPID-542833",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "security_configuration_tool",
            "product": {
              "name": "security_configuration_tool",
              "product_id": "CSAFPID-540747",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:security_configuration_tool:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siemens_simatic_s7-1500_tm_mfp",
            "product": {
              "name": "siemens_simatic_s7-1500_tm_mfp",
              "product_id": "CSAFPID-1693048",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:siemens_simatic_s7-1500_tm_mfp:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siemens_simatic_s7_-1500_tm_mfp",
            "product": {
              "name": "siemens_simatic_s7_-1500_tm_mfp",
              "product_id": "CSAFPID-907212",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:siemens_simatic_s7_-1500_tm_mfp:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "siemens_telecontrol_server_basic",
            "product": {
              "name": "siemens_telecontrol_server_basic",
              "product_id": "CSAFPID-907211",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:siemens_telecontrol_server_basic:3:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_mv500_firmware",
            "product": {
              "name": "simatic_mv500_firmware",
              "product_id": "CSAFPID-1692274",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_mv500_firmware:3.3.5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_net_pc_software",
            "product": {
              "name": "simatic_net_pc_software",
              "product_id": "CSAFPID-1472070",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_net_pc_software:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_pcs_7",
            "product": {
              "name": "simatic_pcs_7",
              "product_id": "CSAFPID-1472067",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_pcs_7:9.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware",
            "product": {
              "name": "simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware",
              "product_id": "CSAFPID-1689769",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\\/dp_mfp_firmware:3.1.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_cpu_1518f-4_pn__dp_mfp_firmware",
            "product": {
              "name": "simatic_s7-1500_cpu_1518f-4_pn__dp_mfp_firmware",
              "product_id": "CSAFPID-766929",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn__dp_mfp_firmware:3.1.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_tm_mfp_firmware",
            "product": {
              "name": "simatic_s7-1500_tm_mfp_firmware",
              "product_id": "CSAFPID-717239",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:1.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_s7-1500_tm_mfp_firmware",
            "product": {
              "name": "simatic_s7-1500_tm_mfp_firmware",
              "product_id": "CSAFPID-905869",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_s7-1500_tm_mfp_firmware:1.1:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_step_7",
            "product": {
              "name": "simatic_step_7",
              "product_id": "CSAFPID-879652",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_step_7:5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc",
            "product": {
              "name": "simatic_wincc",
              "product_id": "CSAFPID-1472068",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc:7.4:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc",
            "product": {
              "name": "simatic_wincc",
              "product_id": "CSAFPID-1472066",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc:7.5:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc",
            "product": {
              "name": "simatic_wincc",
              "product_id": "CSAFPID-1472072",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc:8.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_oa",
            "product": {
              "name": "simatic_wincc_oa",
              "product_id": "CSAFPID-1472071",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_oa:3.17:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_advanced",
            "product": {
              "name": "simatic_wincc_runtime_advanced",
              "product_id": "CSAFPID-886176",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional",
            "product": {
              "name": "simatic_wincc_runtime_professional",
              "product_id": "CSAFPID-165976",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_runtime_professional:16:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional",
            "product": {
              "name": "simatic_wincc_runtime_professional",
              "product_id": "CSAFPID-165974",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_runtime_professional:17:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional",
            "product": {
              "name": "simatic_wincc_runtime_professional",
              "product_id": "CSAFPID-855582",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_runtime_professional:18:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "simatic_wincc_runtime_professional",
            "product": {
              "name": "simatic_wincc_runtime_professional",
              "product_id": "CSAFPID-855580",
              "product_identification_helper": {
                "cpe": "cpe:2.3:o:siemens:simatic_wincc_runtime_professional:19:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-3506",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2021-3506",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2021/CVE-2021-3506.json"
        }
      ],
      "title": "CVE-2021-3506"
    },
    {
      "cve": "CVE-2023-2975",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Authentication",
          "title": "CWE-287"
        },
        {
          "category": "other",
          "text": "Improper Validation of Integrity Check Value",
          "title": "CWE-354"
        },
        {
          "category": "other",
          "text": "Use of a Broken or Risky Cryptographic Algorithm",
          "title": "CWE-327"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1703073",
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-2975",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2975.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1703073",
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-2975"
    },
    {
      "cve": "CVE-2023-3341",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-3341",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3341.json"
        }
      ],
      "title": "CVE-2023-3341"
    },
    {
      "cve": "CVE-2023-3446",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Inefficient Regular Expression Complexity",
          "title": "CWE-1333"
        },
        {
          "category": "other",
          "text": "Unchecked Input for Loop Condition",
          "title": "CWE-606"
        },
        {
          "category": "other",
          "text": "Use of a Cryptographic Primitive with a Risky Implementation",
          "title": "CWE-1240"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703073",
          "CSAFPID-309392",
          "CSAFPID-1637855",
          "CSAFPID-1703131",
          "CSAFPID-1703173"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-3446",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3446.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703073",
            "CSAFPID-309392",
            "CSAFPID-1637855",
            "CSAFPID-1703131",
            "CSAFPID-1703173"
          ]
        }
      ],
      "title": "CVE-2023-3446"
    },
    {
      "cve": "CVE-2023-3817",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Excessive Iteration",
          "title": "CWE-834"
        },
        {
          "category": "other",
          "text": "Unchecked Input for Loop Condition",
          "title": "CWE-606"
        },
        {
          "category": "other",
          "text": "Use of a Cryptographic Primitive with a Risky Implementation",
          "title": "CWE-1240"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1613729",
          "CSAFPID-1703073",
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-3817",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3817.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1613729",
            "CSAFPID-1703073",
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-3817"
    },
    {
      "cve": "CVE-2023-4236",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "notes": [
        {
          "category": "other",
          "text": "Reachable Assertion",
          "title": "CWE-617"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-4236",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4236.json"
        }
      ],
      "title": "CVE-2023-4236"
    },
    {
      "cve": "CVE-2023-4408",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-4408",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4408.json"
        }
      ],
      "title": "CVE-2023-4408"
    },
    {
      "cve": "CVE-2023-4807",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Expected Behavior Violation",
          "title": "CWE-440"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1637855",
          "CSAFPID-1703180",
          "CSAFPID-1703181",
          "CSAFPID-1703182",
          "CSAFPID-1703183",
          "CSAFPID-1703184",
          "CSAFPID-1703185",
          "CSAFPID-1703186"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-4807",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4807.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1637855",
            "CSAFPID-1703180",
            "CSAFPID-1703181",
            "CSAFPID-1703182",
            "CSAFPID-1703183",
            "CSAFPID-1703184",
            "CSAFPID-1703185",
            "CSAFPID-1703186"
          ]
        }
      ],
      "title": "CVE-2023-4807"
    },
    {
      "cve": "CVE-2023-5363",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Cryptographic Step",
          "title": "CWE-325"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Incorrect Provision of Specified Functionality",
          "title": "CWE-684"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1703180",
          "CSAFPID-1703181",
          "CSAFPID-1703182",
          "CSAFPID-1703183",
          "CSAFPID-1703184",
          "CSAFPID-1703185",
          "CSAFPID-1703186"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5363",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5363.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1703180",
            "CSAFPID-1703181",
            "CSAFPID-1703182",
            "CSAFPID-1703183",
            "CSAFPID-1703184",
            "CSAFPID-1703185",
            "CSAFPID-1703186"
          ]
        }
      ],
      "title": "CVE-2023-5363"
    },
    {
      "cve": "CVE-2023-5517",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "notes": [
        {
          "category": "other",
          "text": "Reachable Assertion",
          "title": "CWE-617"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5517",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5517.json"
        }
      ],
      "title": "CVE-2023-5517"
    },
    {
      "cve": "CVE-2023-5678",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Check for Unusual or Exceptional Conditions",
          "title": "CWE-754"
        },
        {
          "category": "other",
          "text": "Missing Cryptographic Step",
          "title": "CWE-325"
        },
        {
          "category": "other",
          "text": "Unchecked Input for Loop Condition",
          "title": "CWE-606"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1613729",
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1637855",
          "CSAFPID-1703131",
          "CSAFPID-309392",
          "CSAFPID-1703173",
          "CSAFPID-1703180",
          "CSAFPID-1703181",
          "CSAFPID-1703182",
          "CSAFPID-1703183",
          "CSAFPID-1703184",
          "CSAFPID-1703185",
          "CSAFPID-1703186"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5678",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5678.json"
        }
      ],
      "title": "CVE-2023-5678"
    },
    {
      "cve": "CVE-2023-5679",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "notes": [
        {
          "category": "other",
          "text": "Reachable Assertion",
          "title": "CWE-617"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5679",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5679.json"
        }
      ],
      "title": "CVE-2023-5679"
    },
    {
      "cve": "CVE-2023-5680",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-5680",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5680.json"
        }
      ],
      "title": "CVE-2023-5680"
    },
    {
      "cve": "CVE-2023-6129",
      "cwe": {
        "id": "CWE-328",
        "name": "Use of Weak Hash"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Weak Hash",
          "title": "CWE-328"
        },
        {
          "category": "other",
          "text": "Expected Behavior Violation",
          "title": "CWE-440"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        },
        {
          "category": "other",
          "text": "Use of a Broken or Risky Cryptographic Algorithm",
          "title": "CWE-327"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-6129",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6129.json"
        }
      ],
      "title": "CVE-2023-6129"
    },
    {
      "cve": "CVE-2023-6237",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Unchecked Input for Loop Condition",
          "title": "CWE-606"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-6237",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6237.json"
        }
      ],
      "title": "CVE-2023-6237"
    },
    {
      "cve": "CVE-2023-6516",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Memory Allocation with Excessive Size Value",
          "title": "CWE-789"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-6516",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6516.json"
        }
      ],
      "title": "CVE-2023-6516"
    },
    {
      "cve": "CVE-2023-7104",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-7104",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-7104.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1703131"
          ]
        }
      ],
      "title": "CVE-2023-7104"
    },
    {
      "cve": "CVE-2023-28450",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        },
        {
          "category": "other",
          "text": "Missing Encryption of Sensitive Data",
          "title": "CWE-311"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1613504",
          "CSAFPID-1613505",
          "CSAFPID-1613506",
          "CSAFPID-1613507",
          "CSAFPID-1613592",
          "CSAFPID-1613593",
          "CSAFPID-1613594",
          "CSAFPID-1613595",
          "CSAFPID-1613596",
          "CSAFPID-1613597",
          "CSAFPID-1613598"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-28450",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28450.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1613504",
            "CSAFPID-1613505",
            "CSAFPID-1613506",
            "CSAFPID-1613507",
            "CSAFPID-1613592",
            "CSAFPID-1613593",
            "CSAFPID-1613594",
            "CSAFPID-1613595",
            "CSAFPID-1613596",
            "CSAFPID-1613597",
            "CSAFPID-1613598"
          ]
        }
      ],
      "title": "CVE-2023-28450"
    },
    {
      "cve": "CVE-2023-30584",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-30584",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-30584.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-30584"
    },
    {
      "cve": "CVE-2023-32002",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "other",
          "text": "Missing Encryption of Sensitive Data",
          "title": "CWE-311"
        },
        {
          "category": "other",
          "text": "Policy Privileges are not Assigned Consistently Between Control and Data Agents",
          "title": "CWE-1268"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32002",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32002.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-32002"
    },
    {
      "cve": "CVE-2023-32003",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32003",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32003.json"
        }
      ],
      "title": "CVE-2023-32003"
    },
    {
      "cve": "CVE-2023-32004",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32004",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32004.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-32004"
    },
    {
      "cve": "CVE-2023-32005",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "other",
          "text": "Incorrect Permission Assignment for Critical Resource",
          "title": "CWE-732"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32005",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32005.json"
        }
      ],
      "title": "CVE-2023-32005"
    },
    {
      "cve": "CVE-2023-32006",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "other",
          "text": "Exposure of Sensitive Information Due to Incompatible Policies",
          "title": "CWE-213"
        },
        {
          "category": "other",
          "text": "Missing Encryption of Sensitive Data",
          "title": "CWE-311"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32006",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32006.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-32006"
    },
    {
      "cve": "CVE-2023-32558",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32558",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32558.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-32558"
    },
    {
      "cve": "CVE-2023-32559",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        },
        {
          "category": "other",
          "text": "Missing Encryption of Sensitive Data",
          "title": "CWE-311"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32559",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32559.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2023-32559"
    },
    {
      "cve": "CVE-2023-32736",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1712825",
          "CSAFPID-1712826",
          "CSAFPID-1703190",
          "CSAFPID-1703191",
          "CSAFPID-1500667",
          "CSAFPID-1703187",
          "CSAFPID-1703188",
          "CSAFPID-1703189",
          "CSAFPID-1703192",
          "CSAFPID-1703193",
          "CSAFPID-1703194",
          "CSAFPID-1702687",
          "CSAFPID-1702688",
          "CSAFPID-1703195",
          "CSAFPID-1702694",
          "CSAFPID-1703196",
          "CSAFPID-1703197",
          "CSAFPID-1703198",
          "CSAFPID-1703199",
          "CSAFPID-1703200",
          "CSAFPID-1703201",
          "CSAFPID-1703202",
          "CSAFPID-1703203",
          "CSAFPID-1703204",
          "CSAFPID-1703205",
          "CSAFPID-1703206",
          "CSAFPID-1703207",
          "CSAFPID-1712827",
          "CSAFPID-1712828",
          "CSAFPID-1712829"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-32736",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-32736.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1712825",
            "CSAFPID-1712826",
            "CSAFPID-1703190",
            "CSAFPID-1703191",
            "CSAFPID-1500667",
            "CSAFPID-1703187",
            "CSAFPID-1703188",
            "CSAFPID-1703189",
            "CSAFPID-1703192",
            "CSAFPID-1703193",
            "CSAFPID-1703194",
            "CSAFPID-1702687",
            "CSAFPID-1702688",
            "CSAFPID-1703195",
            "CSAFPID-1702694",
            "CSAFPID-1703196",
            "CSAFPID-1703197",
            "CSAFPID-1703198",
            "CSAFPID-1703199",
            "CSAFPID-1703200",
            "CSAFPID-1703201",
            "CSAFPID-1703202",
            "CSAFPID-1703203",
            "CSAFPID-1703204",
            "CSAFPID-1703205",
            "CSAFPID-1703206",
            "CSAFPID-1703207",
            "CSAFPID-1712827",
            "CSAFPID-1712828",
            "CSAFPID-1712829"
          ]
        }
      ],
      "title": "CVE-2023-32736"
    },
    {
      "cve": "CVE-2023-38552",
      "cwe": {
        "id": "CWE-354",
        "name": "Improper Validation of Integrity Check Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Validation of Integrity Check Value",
          "title": "CWE-354"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-38552",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38552.json"
        }
      ],
      "title": "CVE-2023-38552"
    },
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
          "title": "CWE-113"
        },
        {
          "category": "other",
          "text": "Improper Validation of Specified Quantity in Input",
          "title": "CWE-1284"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-38709",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38709.json"
        }
      ],
      "title": "CVE-2023-38709"
    },
    {
      "cve": "CVE-2023-39331",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-39331",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39331.json"
        }
      ],
      "title": "CVE-2023-39331"
    },
    {
      "cve": "CVE-2023-39332",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-39332",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39332.json"
        }
      ],
      "title": "CVE-2023-39332"
    },
    {
      "cve": "CVE-2023-39333",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-39333",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39333.json"
        }
      ],
      "title": "CVE-2023-39333"
    },
    {
      "cve": "CVE-2023-44487",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-309392",
          "CSAFPID-1615259",
          "CSAFPID-1703173"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-44487",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44487.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-309392",
            "CSAFPID-1615259",
            "CSAFPID-1703173"
          ]
        }
      ],
      "title": "CVE-2023-44487"
    },
    {
      "cve": "CVE-2023-45143",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-45143",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45143.json"
        }
      ],
      "title": "CVE-2023-45143"
    },
    {
      "cve": "CVE-2023-46218",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insertion of Sensitive Information Into Sent Data",
          "title": "CWE-201"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703180",
          "CSAFPID-1703181",
          "CSAFPID-1703182",
          "CSAFPID-1703183",
          "CSAFPID-1703184",
          "CSAFPID-1703185",
          "CSAFPID-1703186"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-46218",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46218.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703180",
            "CSAFPID-1703181",
            "CSAFPID-1703182",
            "CSAFPID-1703183",
            "CSAFPID-1703184",
            "CSAFPID-1703185",
            "CSAFPID-1703186"
          ]
        }
      ],
      "title": "CVE-2023-46218"
    },
    {
      "cve": "CVE-2023-46219",
      "cwe": {
        "id": "CWE-311",
        "name": "Missing Encryption of Sensitive Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Encryption of Sensitive Data",
          "title": "CWE-311"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703180",
          "CSAFPID-1703181",
          "CSAFPID-1703182",
          "CSAFPID-1703183",
          "CSAFPID-1703184",
          "CSAFPID-1703185",
          "CSAFPID-1703186"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-46219",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46219.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703180",
            "CSAFPID-1703181",
            "CSAFPID-1703182",
            "CSAFPID-1703183",
            "CSAFPID-1703184",
            "CSAFPID-1703185",
            "CSAFPID-1703186"
          ]
        }
      ],
      "title": "CVE-2023-46219"
    },
    {
      "cve": "CVE-2023-46280",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1458012",
          "CSAFPID-309392",
          "CSAFPID-1625338",
          "CSAFPID-1625340",
          "CSAFPID-1625341",
          "CSAFPID-75563",
          "CSAFPID-1625342",
          "CSAFPID-165765",
          "CSAFPID-1625345",
          "CSAFPID-766087",
          "CSAFPID-1637559",
          "CSAFPID-1637560",
          "CSAFPID-1637561",
          "CSAFPID-1637909",
          "CSAFPID-1637910",
          "CSAFPID-1637849",
          "CSAFPID-1637850",
          "CSAFPID-1637851",
          "CSAFPID-1637911",
          "CSAFPID-1501190",
          "CSAFPID-1637912",
          "CSAFPID-1637856",
          "CSAFPID-1637913",
          "CSAFPID-1637914",
          "CSAFPID-1637915",
          "CSAFPID-1637916",
          "CSAFPID-1637917",
          "CSAFPID-1637887",
          "CSAFPID-1501188",
          "CSAFPID-1501192",
          "CSAFPID-1637854",
          "CSAFPID-1501193",
          "CSAFPID-1501191",
          "CSAFPID-1501189",
          "CSAFPID-1615531",
          "CSAFPID-1615256",
          "CSAFPID-1615257",
          "CSAFPID-1615258",
          "CSAFPID-1637618",
          "CSAFPID-1470060",
          "CSAFPID-1470061",
          "CSAFPID-1470062",
          "CSAFPID-1470063",
          "CSAFPID-1470064",
          "CSAFPID-1457909",
          "CSAFPID-1470065",
          "CSAFPID-1470066",
          "CSAFPID-1457855",
          "CSAFPID-1457956",
          "CSAFPID-1457957",
          "CSAFPID-1457958",
          "CSAFPID-1470067",
          "CSAFPID-1457960",
          "CSAFPID-1457961",
          "CSAFPID-1457962",
          "CSAFPID-1457963",
          "CSAFPID-1470068",
          "CSAFPID-1457965",
          "CSAFPID-1457966",
          "CSAFPID-1457967",
          "CSAFPID-1470069",
          "CSAFPID-1470070",
          "CSAFPID-1470071",
          "CSAFPID-1470072",
          "CSAFPID-1458014",
          "CSAFPID-1458015",
          "CSAFPID-1458016",
          "CSAFPID-1458017",
          "CSAFPID-1470073",
          "CSAFPID-75533",
          "CSAFPID-1472069",
          "CSAFPID-1472073",
          "CSAFPID-74792",
          "CSAFPID-74794",
          "CSAFPID-1457906",
          "CSAFPID-1457907",
          "CSAFPID-1457908"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-46280",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46280.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1458012",
            "CSAFPID-309392",
            "CSAFPID-1625338",
            "CSAFPID-1625340",
            "CSAFPID-1625341",
            "CSAFPID-75563",
            "CSAFPID-1625342",
            "CSAFPID-165765",
            "CSAFPID-1625345",
            "CSAFPID-766087",
            "CSAFPID-1637559",
            "CSAFPID-1637560",
            "CSAFPID-1637561",
            "CSAFPID-1637909",
            "CSAFPID-1637910",
            "CSAFPID-1637849",
            "CSAFPID-1637850",
            "CSAFPID-1637851",
            "CSAFPID-1637911",
            "CSAFPID-1501190",
            "CSAFPID-1637912",
            "CSAFPID-1637856",
            "CSAFPID-1637913",
            "CSAFPID-1637914",
            "CSAFPID-1637915",
            "CSAFPID-1637916",
            "CSAFPID-1637917",
            "CSAFPID-1637887",
            "CSAFPID-1501188",
            "CSAFPID-1501192",
            "CSAFPID-1637854",
            "CSAFPID-1501193",
            "CSAFPID-1501191",
            "CSAFPID-1501189",
            "CSAFPID-1615531",
            "CSAFPID-1615256",
            "CSAFPID-1615257",
            "CSAFPID-1615258",
            "CSAFPID-1637618",
            "CSAFPID-1470060",
            "CSAFPID-1470061",
            "CSAFPID-1470062",
            "CSAFPID-1470063",
            "CSAFPID-1470064",
            "CSAFPID-1457909",
            "CSAFPID-1470065",
            "CSAFPID-1470066",
            "CSAFPID-1457855",
            "CSAFPID-1457956",
            "CSAFPID-1457957",
            "CSAFPID-1457958",
            "CSAFPID-1470067",
            "CSAFPID-1457960",
            "CSAFPID-1457961",
            "CSAFPID-1457962",
            "CSAFPID-1457963",
            "CSAFPID-1470068",
            "CSAFPID-1457965",
            "CSAFPID-1457966",
            "CSAFPID-1457967",
            "CSAFPID-1470069",
            "CSAFPID-1470070",
            "CSAFPID-1470071",
            "CSAFPID-1470072",
            "CSAFPID-1458014",
            "CSAFPID-1458015",
            "CSAFPID-1458016",
            "CSAFPID-1458017",
            "CSAFPID-1470073",
            "CSAFPID-75533",
            "CSAFPID-1472069",
            "CSAFPID-1472073",
            "CSAFPID-74792",
            "CSAFPID-74794",
            "CSAFPID-1457906",
            "CSAFPID-1457907",
            "CSAFPID-1457908"
          ]
        }
      ],
      "title": "CVE-2023-46280"
    },
    {
      "cve": "CVE-2023-46809",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "notes": [
        {
          "category": "other",
          "text": "Observable Timing Discrepancy",
          "title": "CWE-208"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-46809",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46809.json"
        }
      ],
      "title": "CVE-2023-46809"
    },
    {
      "cve": "CVE-2023-47038",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-47038",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-47038.json"
        }
      ],
      "title": "CVE-2023-47038"
    },
    {
      "cve": "CVE-2023-47039",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-47039",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-47039.json"
        }
      ],
      "title": "CVE-2023-47039"
    },
    {
      "cve": "CVE-2023-47100",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-47100",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-47100.json"
        }
      ],
      "title": "CVE-2023-47100"
    },
    {
      "cve": "CVE-2023-48795",
      "cwe": {
        "id": "CWE-222",
        "name": "Truncation of Security-relevant Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "Truncation of Security-relevant Information",
          "title": "CWE-222"
        },
        {
          "category": "other",
          "text": "Selection of Less-Secure Algorithm During Negotiation (\u0027Algorithm Downgrade\u0027)",
          "title": "CWE-757"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615259",
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-48795",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615259",
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703131"
          ]
        }
      ],
      "title": "CVE-2023-48795"
    },
    {
      "cve": "CVE-2023-49441",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-49441",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49441.json"
        }
      ],
      "title": "CVE-2023-49441"
    },
    {
      "cve": "CVE-2023-50387",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-50387",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-50387.json"
        }
      ],
      "title": "CVE-2023-50387"
    },
    {
      "cve": "CVE-2023-50868",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-50868",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-50868.json"
        }
      ],
      "title": "CVE-2023-50868"
    },
    {
      "cve": "CVE-2023-52389",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-52389",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-52389.json"
        }
      ],
      "title": "CVE-2023-52389"
    },
    {
      "cve": "CVE-2024-0232",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-0232",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0232.json"
        }
      ],
      "title": "CVE-2024-0232"
    },
    {
      "cve": "CVE-2024-0727",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "other",
          "text": "NULL Pointer Dereference",
          "title": "CWE-476"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1613729",
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-0727",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0727.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1613729",
            "CSAFPID-1703131"
          ]
        }
      ],
      "title": "CVE-2024-0727"
    },
    {
      "cve": "CVE-2024-2004",
      "cwe": {
        "id": "CWE-319",
        "name": "Cleartext Transmission of Sensitive Information"
      },
      "notes": [
        {
          "category": "other",
          "text": "Cleartext Transmission of Sensitive Information",
          "title": "CWE-319"
        },
        {
          "category": "other",
          "text": "Misinterpretation of Input",
          "title": "CWE-115"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Interpretation Conflict",
          "title": "CWE-436"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-894438"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2004",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2004.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-894438"
          ]
        }
      ],
      "title": "CVE-2024-2004"
    },
    {
      "cve": "CVE-2024-2379",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-894438"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2379",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2379.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-894438"
          ]
        }
      ],
      "title": "CVE-2024-2379"
    },
    {
      "cve": "CVE-2024-2398",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Resource after Effective Lifetime",
          "title": "CWE-772"
        },
        {
          "category": "other",
          "text": "Missing Release of Memory after Effective Lifetime",
          "title": "CWE-401"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-894438"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2398",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2398.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-894438"
          ]
        }
      ],
      "title": "CVE-2024-2398"
    },
    {
      "cve": "CVE-2024-2466",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        },
        {
          "category": "other",
          "text": "Improper Validation of Certificate with Host Mismatch",
          "title": "CWE-297"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-894438"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2466",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2466.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-894438"
          ]
        }
      ],
      "title": "CVE-2024-2466"
    },
    {
      "cve": "CVE-2024-2511",
      "cwe": {
        "id": "CWE-404",
        "name": "Improper Resource Shutdown or Release"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        },
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Improperly Controlled Sequential Memory Allocation",
          "title": "CWE-1325"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-2511",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2511.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703131"
          ]
        }
      ],
      "title": "CVE-2024-2511"
    },
    {
      "cve": "CVE-2024-4603",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "notes": [
        {
          "category": "other",
          "text": "Unchecked Input for Loop Condition",
          "title": "CWE-606"
        },
        {
          "category": "other",
          "text": "Excessive Iteration",
          "title": "CWE-834"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-4603",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json"
        }
      ],
      "title": "CVE-2024-4603"
    },
    {
      "cve": "CVE-2024-4741",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-4741",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4741.json"
        }
      ],
      "title": "CVE-2024-4741"
    },
    {
      "cve": "CVE-2024-5535",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1615260",
          "CSAFPID-1615261",
          "CSAFPID-1615262",
          "CSAFPID-1615263",
          "CSAFPID-1615264",
          "CSAFPID-1703131"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-5535",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1615260",
            "CSAFPID-1615261",
            "CSAFPID-1615262",
            "CSAFPID-1615263",
            "CSAFPID-1615264",
            "CSAFPID-1703131"
          ]
        }
      ],
      "title": "CVE-2024-5535"
    },
    {
      "cve": "CVE-2024-5594",
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-5594",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5594.json"
        }
      ],
      "title": "CVE-2024-5594"
    },
    {
      "cve": "CVE-2024-21890",
      "cwe": {
        "id": "CWE-275",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-275",
          "title": "CWE-275"
        },
        {
          "category": "other",
          "text": "Insufficient Technical Documentation",
          "title": "CWE-1059"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21890",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21890.json"
        }
      ],
      "title": "CVE-2024-21890"
    },
    {
      "cve": "CVE-2024-21891",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21891",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21891.json"
        }
      ],
      "title": "CVE-2024-21891"
    },
    {
      "cve": "CVE-2024-21892",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
          "title": "CWE-94"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21892",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21892.json"
        }
      ],
      "title": "CVE-2024-21892"
    },
    {
      "cve": "CVE-2024-21896",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-21896",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-21896.json"
        }
      ],
      "title": "CVE-2024-21896"
    },
    {
      "cve": "CVE-2024-22017",
      "cwe": {
        "id": "CWE-271",
        "name": "Privilege Dropping / Lowering Errors"
      },
      "notes": [
        {
          "category": "other",
          "text": "Privilege Dropping / Lowering Errors",
          "title": "CWE-271"
        },
        {
          "category": "other",
          "text": "Improper Privilege Management",
          "title": "CWE-269"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-22017",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22017.json"
        }
      ],
      "title": "CVE-2024-22017"
    },
    {
      "cve": "CVE-2024-22019",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-22019",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22019.json"
        }
      ],
      "title": "CVE-2024-22019"
    },
    {
      "cve": "CVE-2024-22025",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Improper Resource Shutdown or Release",
          "title": "CWE-404"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-22025",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-22025.json"
        }
      ],
      "title": "CVE-2024-22025"
    },
    {
      "cve": "CVE-2024-24758",
      "cwe": {
        "id": "CWE-942",
        "name": "Permissive Cross-domain Policy with Untrusted Domains"
      },
      "notes": [
        {
          "category": "other",
          "text": "Permissive Cross-domain Policy with Untrusted Domains",
          "title": "CWE-942"
        },
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-24758",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24758.json"
        }
      ],
      "title": "CVE-2024-24758"
    },
    {
      "cve": "CVE-2024-24795",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
          "title": "CWE-113"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-24795",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24795.json"
        }
      ],
      "title": "CVE-2024-24795"
    },
    {
      "cve": "CVE-2024-24806",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Server-Side Request Forgery (SSRF)",
          "title": "CWE-918"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-24806",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-24806.json"
        }
      ],
      "title": "CVE-2024-24806"
    },
    {
      "cve": "CVE-2024-26306",
      "cwe": {
        "id": "CWE-310",
        "name": "-"
      },
      "notes": [
        {
          "category": "other",
          "text": "CWE-310",
          "title": "CWE-310"
        },
        {
          "category": "other",
          "text": "Observable Discrepancy",
          "title": "CWE-203"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-26306",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26306.json"
        }
      ],
      "title": "CVE-2024-26306"
    },
    {
      "cve": "CVE-2024-26925",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Improper Locking",
          "title": "CWE-667"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-26925",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26925.json"
        }
      ],
      "title": "CVE-2024-26925"
    },
    {
      "cve": "CVE-2024-27316",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Allocation of Resources Without Limits or Throttling",
          "title": "CWE-770"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27316",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27316.json"
        }
      ],
      "title": "CVE-2024-27316"
    },
    {
      "cve": "CVE-2024-27980",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27980",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27980.json"
        }
      ],
      "title": "CVE-2024-27980"
    },
    {
      "cve": "CVE-2024-27982",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)",
          "title": "CWE-444"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27982",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27982.json"
        }
      ],
      "title": "CVE-2024-27982"
    },
    {
      "cve": "CVE-2024-27983",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-27983",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27983.json"
        }
      ],
      "title": "CVE-2024-27983"
    },
    {
      "cve": "CVE-2024-28882",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "notes": [
        {
          "category": "other",
          "text": "Missing Release of Resource after Effective Lifetime",
          "title": "CWE-772"
        }
      ],
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-28882",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-28882.json"
        }
      ],
      "title": "CVE-2024-28882"
    },
    {
      "cve": "CVE-2024-29119",
      "cwe": {
        "id": "CWE-266",
        "name": "Incorrect Privilege Assignment"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Privilege Assignment",
          "title": "CWE-266"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-524281"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-29119",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29119.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-524281"
          ]
        }
      ],
      "title": "CVE-2024-29119"
    },
    {
      "cve": "CVE-2024-36140",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1712832",
          "CSAFPID-1712833"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-36140",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36140.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1712832",
            "CSAFPID-1712833"
          ]
        }
      ],
      "title": "CVE-2024-36140"
    },
    {
      "cve": "CVE-2024-44102",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1712834",
          "CSAFPID-1712835",
          "CSAFPID-1712836",
          "CSAFPID-1712837",
          "CSAFPID-1712838",
          "CSAFPID-1712839",
          "CSAFPID-1712840",
          "CSAFPID-1712841",
          "CSAFPID-1712842",
          "CSAFPID-1712843",
          "CSAFPID-1712844",
          "CSAFPID-1712845",
          "CSAFPID-1712846"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-44102",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-44102.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1712834",
            "CSAFPID-1712835",
            "CSAFPID-1712836",
            "CSAFPID-1712837",
            "CSAFPID-1712838",
            "CSAFPID-1712839",
            "CSAFPID-1712840",
            "CSAFPID-1712841",
            "CSAFPID-1712842",
            "CSAFPID-1712843",
            "CSAFPID-1712844",
            "CSAFPID-1712845",
            "CSAFPID-1712846"
          ]
        }
      ],
      "title": "CVE-2024-44102"
    },
    {
      "cve": "CVE-2024-46888",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46888",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46888.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46888"
    },
    {
      "cve": "CVE-2024-46889",
      "cwe": {
        "id": "CWE-321",
        "name": "Use of Hard-coded Cryptographic Key"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Cryptographic Key",
          "title": "CWE-321"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46889",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46889.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46889"
    },
    {
      "cve": "CVE-2024-46890",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46890",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46890.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46890"
    },
    {
      "cve": "CVE-2024-46891",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46891",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46891.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46891"
    },
    {
      "cve": "CVE-2024-46892",
      "cwe": {
        "id": "CWE-613",
        "name": "Insufficient Session Expiration"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficient Session Expiration",
          "title": "CWE-613"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46892",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46892.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46892"
    },
    {
      "cve": "CVE-2024-46894",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-746925"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-46894",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46894.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-746925"
          ]
        }
      ],
      "title": "CVE-2024-46894"
    },
    {
      "cve": "CVE-2024-47783",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Permission Assignment for Critical Resource",
          "title": "CWE-732"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1712847"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47783",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1712847"
          ]
        }
      ],
      "title": "CVE-2024-47783"
    },
    {
      "cve": "CVE-2024-47808",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Permission Assignment for Critical Resource",
          "title": "CWE-732"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-309392"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47808",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47808.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-309392"
          ]
        }
      ],
      "title": "CVE-2024-47808"
    },
    {
      "cve": "CVE-2024-47940",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1680248"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47940",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47940.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1680248"
          ]
        }
      ],
      "title": "CVE-2024-47940"
    },
    {
      "cve": "CVE-2024-47941",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1680248"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47941",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47941.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1680248"
          ]
        }
      ],
      "title": "CVE-2024-47941"
    },
    {
      "cve": "CVE-2024-47942",
      "cwe": {
        "id": "CWE-427",
        "name": "Uncontrolled Search Path Element"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Search Path Element",
          "title": "CWE-427"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1680248"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47942",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47942.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1680248"
          ]
        }
      ],
      "title": "CVE-2024-47942"
    },
    {
      "cve": "CVE-2024-50310",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1712748"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50310",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50310.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1712748"
          ]
        }
      ],
      "title": "CVE-2024-50310"
    },
    {
      "cve": "CVE-2024-50313",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
          "title": "CWE-362"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1637622",
          "CSAFPID-1637623",
          "CSAFPID-1637624",
          "CSAFPID-1637625",
          "CSAFPID-1637626"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50313",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50313.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1637622",
            "CSAFPID-1637623",
            "CSAFPID-1637624",
            "CSAFPID-1637625",
            "CSAFPID-1637626"
          ]
        }
      ],
      "title": "CVE-2024-50313"
    },
    {
      "cve": "CVE-2024-50557",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50557",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50557.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50557"
    },
    {
      "cve": "CVE-2024-50558",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50558",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50558.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50558"
    },
    {
      "cve": "CVE-2024-50559",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50559",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50559.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50559"
    },
    {
      "cve": "CVE-2024-50560",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50560",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50560.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50560"
    },
    {
      "cve": "CVE-2024-50561",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50561",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50561.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50561"
    },
    {
      "cve": "CVE-2024-50572",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
          "title": "CWE-74"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1702670",
          "CSAFPID-1702671",
          "CSAFPID-1702672",
          "CSAFPID-1712749",
          "CSAFPID-1712750",
          "CSAFPID-1702677",
          "CSAFPID-1702678",
          "CSAFPID-1702679",
          "CSAFPID-1712751",
          "CSAFPID-1712752",
          "CSAFPID-1702681",
          "CSAFPID-1712753",
          "CSAFPID-1702682",
          "CSAFPID-1702683",
          "CSAFPID-1712754",
          "CSAFPID-1712755",
          "CSAFPID-1712756",
          "CSAFPID-1712757",
          "CSAFPID-1712758",
          "CSAFPID-1712759",
          "CSAFPID-1702684",
          "CSAFPID-1702685",
          "CSAFPID-1712760",
          "CSAFPID-1712761"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-50572",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50572.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1702670",
            "CSAFPID-1702671",
            "CSAFPID-1702672",
            "CSAFPID-1712749",
            "CSAFPID-1712750",
            "CSAFPID-1702677",
            "CSAFPID-1702678",
            "CSAFPID-1702679",
            "CSAFPID-1712751",
            "CSAFPID-1712752",
            "CSAFPID-1702681",
            "CSAFPID-1712753",
            "CSAFPID-1702682",
            "CSAFPID-1702683",
            "CSAFPID-1712754",
            "CSAFPID-1712755",
            "CSAFPID-1712756",
            "CSAFPID-1712757",
            "CSAFPID-1712758",
            "CSAFPID-1712759",
            "CSAFPID-1702684",
            "CSAFPID-1702685",
            "CSAFPID-1712760",
            "CSAFPID-1712761"
          ]
        }
      ],
      "title": "CVE-2024-50572"
    }
  ]
}

NCSC-2025-0027

Vulnerability from csaf_ncscnl - Published: 2025-01-22 13:36 - Updated: 2025-01-22 13:36

Summary

Kwetsbaarheden verholpen in Oracle Fusion Middleware

Notes

Feiten: Oracle heeft meerdere kwetsbaarheden verholpen in zijn producten, waaronder Oracle Fusion Middleware, Oracle WebLogic Server, en Oracle HTTP Server.

Interpretaties: De kwetsbaarheden bevinden zich in verschillende Oracle producten, waaronder Oracle WebLogic Server versies 12.2.1.4.0 en 14.1.1.0.0, die het mogelijk maken voor ongeauthenticeerde kwaadwillenden om toegang te krijgen tot kritieke gegevens. Dit kan leiden tot ernstige gevolgen voor de vertrouwelijkheid, integriteit en beschikbaarheid van de systemen. De kwetsbaarheid in Oracle HTTP Server versie 12.2.1.4.0 stelt kwaadwillenden in staat om ongeautoriseerde toegang te verkrijgen, met een CVSS-score van 5.3, terwijl de kwetsbaarheid in WebLogic Server een CVSS-score van 9.8 heeft, wat wijst op een kritieke impact. Kwaadwillenden kunnen ook gebruik maken van kwetsbaarheden in Oracle Fusion Middleware en andere producten om Denial-of-Service (DoS) aanvallen uit te voeren.

Oplossingen: Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CWE-35: Path Traversal: '.../...//'

CWE-1395: Dependency on Vulnerable Third-Party Component

CWE-130: Improper Handling of Length Parameter Inconsistency

CWE-755: Improper Handling of Exceptional Conditions

CWE-732: Incorrect Permission Assignment for Critical Resource

CWE-116: Improper Encoding or Escaping of Output

CWE-190: Integer Overflow or Wraparound

CWE-532: Insertion of Sensitive Information into Log File

CWE-798: Use of Hard-coded Credentials

CWE-125: Out-of-bounds Read

CWE-284: Improper Access Control

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-295: Improper Certificate Validation

CWE-400: Uncontrolled Resource Consumption

CWE-502: Deserialization of Untrusted Data

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-611: Improper Restriction of XML External Entity Reference

CWE-787: Out-of-bounds Write

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-122: Heap-based Buffer Overflow

CWE-121: Stack-based Buffer Overflow

CWE-20: Improper Input Validation

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-12415

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-611 - Improper Restriction of XML External Entity Reference

Affected products

Known affected 19 products

Product	Identifier	Version
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:-:::::::*`	—
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.6:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:14.1.1.0.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
business_activity_monitoring__bam_ oracle	`cpe:2.3:a:oracle:business_activity_monitoring__bam_:12.2.1.3.0:::::::*`	—
business_activity_monitoring__bam_ oracle	`cpe:2.3:a:oracle:business_activity_monitoring__bam_:12.2.1.4.0:::::::*`	—
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.3.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0:::::::*`	—

CVE-2023-7272

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2023-38709

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Known affected 9 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2023-39410

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 10 products

Product	Identifier	Version
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.6:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—

CVE-2023-44483

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-532 - Insertion of Sensitive Information into Log File

Affected products

Known affected 15 products

Product	Identifier	Version
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.6:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:14.1.1.0.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:14.1.1.0.0:::::::*`	—
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—

CVE-2023-49582

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-732 - Incorrect Permission Assignment for Critical Resource

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2023-51775

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 18 products

Product	Identifier	Version
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:8.5.7:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:14.1.1.0.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.6:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:14.1.1.0.0:::::::*`	—
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:14.1.1.0.0:::::::*`	—
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—

CVE-2024-5535

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-6119

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-8096

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-23635

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Known affected 14 products

Product	Identifier	Version
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.6:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:14.1.1.0.0:::::::*`	—
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:14.1.1.0.0:::::::*`	—
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—

CVE-2024-29857

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 12 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.19.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:8.5.7:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:14.1.1.0.0:::::::*`	—

CVE-2024-30171

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-208 - Observable Timing Discrepancy

Affected products

Known affected 9 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2024-30172

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Known affected 9 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2024-34447

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-706 - Use of Incorrectly-Resolved Name or Reference

Affected products

Known affected 9 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2024-34750

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-755 - Improper Handling of Exceptional Conditions

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
managed_file_transfer oracle	`cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:::::::*`	—

CVE-2024-37370

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-130 - Improper Handling of Length Parameter Inconsistency

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
security_service oracle	`cpe:2.3:a:oracle:security_service:12.2.1.4.0:::::::*`	—

CVE-2024-37371

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CWE-130 - Improper Handling of Length Parameter Inconsistency

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
security_service oracle	`cpe:2.3:a:oracle:security_service:12.2.1.4.0:::::::*`	—

CVE-2024-38473

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-172 - Encoding Error

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-38475

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-38816

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—

CVE-2024-38819

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
middleware_common_libraries_and_tools oracle	`cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:::::::*`	—
identity_manager oracle	`cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:::::::*`	—

CVE-2024-38998

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

Known affected 4 products

Product	Identifier	Version
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—

CVE-2024-38999

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-1321 - Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

Known affected 9 products

Product	Identifier	Version
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:8.5.7:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:14.1.1.0.0:::::::*`	—
fusion_middleware_mapviewer oracle	`cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—

CVE-2024-40898

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-45490

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-45491

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-45492

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 7 products

Product	Identifier	Version
outside_in_technology oracle	`cpe:2.3:a:oracle:outside_in_technology:8.5.7:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:8.5.7:::::::*`	—
fusion_middleware oracle	`cpe:2.3:a:oracle:fusion_middleware:14.1.1.0.0:::::::*`	—
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2024-47072

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
business_activity_monitoring oracle	`cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:::::::*`	—

CVE-2024-47554

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 4 products

Product	Identifier	Version
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.2.0.0:::::::*`	—
webcenter_portal oracle	`cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—

CVE-2024-47561

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-502 - Deserialization of Untrusted Data

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
business_process_management_suite oracle	`cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:::::::*`	—

CVE-2025-21498

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
http_server oracle	`cpe:2.3:a:oracle:http_server:12.2.1.4.0:::::::*`	—

CVE-2025-21535

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Known affected 2 products

Product	Identifier	Version	Remediation
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:::::::*`	—
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

CVE-2025-21549

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
weblogic_server oracle	`cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:::::::*`	—

References

35 references

URL	Category
https://www.oracle.com/security-alerts/cpujan2025.html	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2019…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2023…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2024…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Oracle heeft meerdere kwetsbaarheden verholpen in zijn producten, waaronder Oracle Fusion Middleware, Oracle WebLogic Server, en Oracle HTTP Server.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden bevinden zich in verschillende Oracle producten, waaronder Oracle WebLogic Server versies 12.2.1.4.0 en 14.1.1.0.0, die het mogelijk maken voor ongeauthenticeerde kwaadwillenden om toegang te krijgen tot kritieke gegevens. Dit kan leiden tot ernstige gevolgen voor de vertrouwelijkheid, integriteit en beschikbaarheid van de systemen. De kwetsbaarheid in Oracle HTTP Server versie 12.2.1.4.0 stelt kwaadwillenden in staat om ongeautoriseerde toegang te verkrijgen, met een CVSS-score van 5.3, terwijl de kwetsbaarheid in WebLogic Server een CVSS-score van 9.8 heeft, wat wijst op een kritieke impact. Kwaadwillenden kunnen ook gebruik maken van kwetsbaarheden in Oracle Fusion Middleware en andere producten om Denial-of-Service (DoS) aanvallen uit te voeren.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
        "title": "CWE-338"
      },
      {
        "category": "general",
        "text": "Path Traversal: \u0027.../...//\u0027",
        "title": "CWE-35"
      },
      {
        "category": "general",
        "text": "Dependency on Vulnerable Third-Party Component",
        "title": "CWE-1395"
      },
      {
        "category": "general",
        "text": "Improper Handling of Length Parameter Inconsistency",
        "title": "CWE-130"
      },
      {
        "category": "general",
        "text": "Improper Handling of Exceptional Conditions",
        "title": "CWE-755"
      },
      {
        "category": "general",
        "text": "Incorrect Permission Assignment for Critical Resource",
        "title": "CWE-732"
      },
      {
        "category": "general",
        "text": "Improper Encoding or Escaping of Output",
        "title": "CWE-116"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information into Log File",
        "title": "CWE-532"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Improper Certificate Validation",
        "title": "CWE-295"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Deserialization of Untrusted Data",
        "title": "CWE-502"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Improper Restriction of XML External Entity Reference",
        "title": "CWE-611"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Heap-based Buffer Overflow",
        "title": "CWE-122"
      },
      {
        "category": "general",
        "text": "Stack-based Buffer Overflow",
        "title": "CWE-121"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
        "title": "CWE-79"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd; oracle",
        "url": "https://www.oracle.com/security-alerts/cpujan2025.html"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Oracle Fusion Middleware",
    "tracking": {
      "current_release_date": "2025-01-22T13:36:27.908718Z",
      "id": "NCSC-2025-0027",
      "initial_release_date": "2025-01-22T13:36:27.908718Z",
      "revision_history": [
        {
          "date": "2025-01-22T13:36:27.908718Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "http_server",
            "product": {
              "name": "http_server",
              "product_id": "CSAFPID-93909",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "http_server",
            "product": {
              "name": "http_server",
              "product_id": "CSAFPID-40303",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "http_server",
            "product": {
              "name": "http_server",
              "product_id": "CSAFPID-912074",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:http_server:14.1.1.0.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware_mapviewer",
            "product": {
              "name": "fusion_middleware_mapviewer",
              "product_id": "CSAFPID-226018",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-1646487",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:-:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-332789",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:11.1.1.5.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-1747074",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:12.2.1.19.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-342815",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-271904",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-503474",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:14.1.1.0.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "fusion_middleware",
            "product": {
              "name": "fusion_middleware",
              "product_id": "CSAFPID-1674670",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:fusion_middleware:8.5.7:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "weblogic_server",
            "product": {
              "name": "weblogic_server",
              "product_id": "CSAFPID-3661",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "weblogic_server",
            "product": {
              "name": "weblogic_server",
              "product_id": "CSAFPID-3660",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "weblogic_server",
            "product": {
              "name": "weblogic_server",
              "product_id": "CSAFPID-1973",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "weblogic_server",
            "product": {
              "name": "weblogic_server",
              "product_id": "CSAFPID-1751293",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:weblogic_server:14.1.2.0.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "security_service",
            "product": {
              "name": "security_service",
              "product_id": "CSAFPID-199820",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:security_service:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "business_activity_monitoring",
            "product": {
              "name": "business_activity_monitoring",
              "product_id": "CSAFPID-228157",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "business_activity_monitoring__bam_",
            "product": {
              "name": "business_activity_monitoring__bam_",
              "product_id": "CSAFPID-764927",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:business_activity_monitoring__bam_:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "business_activity_monitoring__bam_",
            "product": {
              "name": "business_activity_monitoring__bam_",
              "product_id": "CSAFPID-764928",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:business_activity_monitoring__bam_:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "identity_manager",
            "product": {
              "name": "identity_manager",
              "product_id": "CSAFPID-220164",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:identity_manager:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "managed_file_transfer",
            "product": {
              "name": "managed_file_transfer",
              "product_id": "CSAFPID-204581",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "middleware_common_libraries_and_tools",
            "product": {
              "name": "middleware_common_libraries_and_tools",
              "product_id": "CSAFPID-94398",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "middleware_common_libraries_and_tools",
            "product": {
              "name": "middleware_common_libraries_and_tools",
              "product_id": "CSAFPID-94309",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "middleware_common_libraries_and_tools",
            "product": {
              "name": "middleware_common_libraries_and_tools",
              "product_id": "CSAFPID-94393",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:14.1.1.0.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "business_process_management_suite",
            "product": {
              "name": "business_process_management_suite",
              "product_id": "CSAFPID-9043",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "business_process_management_suite",
            "product": {
              "name": "business_process_management_suite",
              "product_id": "CSAFPID-9642",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "outside_in_technology",
            "product": {
              "name": "outside_in_technology",
              "product_id": "CSAFPID-1260",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:outside_in_technology:8.5.6:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "outside_in_technology",
            "product": {
              "name": "outside_in_technology",
              "product_id": "CSAFPID-912053",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:outside_in_technology:8.5.7:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "webcenter_portal",
            "product": {
              "name": "webcenter_portal",
              "product_id": "CSAFPID-135359",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "webcenter_portal",
            "product": {
              "name": "webcenter_portal",
              "product_id": "CSAFPID-45194",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "oracle"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-12415",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Restriction of XML External Entity Reference",
          "title": "CWE-611"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-45194",
          "CSAFPID-135359",
          "CSAFPID-1646487",
          "CSAFPID-9642",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-204581",
          "CSAFPID-94309",
          "CSAFPID-1260",
          "CSAFPID-3661",
          "CSAFPID-3660",
          "CSAFPID-1973",
          "CSAFPID-94393",
          "CSAFPID-226018",
          "CSAFPID-764927",
          "CSAFPID-764928",
          "CSAFPID-9043",
          "CSAFPID-93909",
          "CSAFPID-94398"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2019-12415",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2019/CVE-2019-12415.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-45194",
            "CSAFPID-135359",
            "CSAFPID-1646487",
            "CSAFPID-9642",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-204581",
            "CSAFPID-94309",
            "CSAFPID-1260",
            "CSAFPID-3661",
            "CSAFPID-3660",
            "CSAFPID-1973",
            "CSAFPID-94393",
            "CSAFPID-226018",
            "CSAFPID-764927",
            "CSAFPID-764928",
            "CSAFPID-9043",
            "CSAFPID-93909",
            "CSAFPID-94398"
          ]
        }
      ],
      "title": "CVE-2019-12415"
    },
    {
      "cve": "CVE-2023-7272",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-7272",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-7272.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2023-7272"
    },
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)",
          "title": "CWE-113"
        },
        {
          "category": "other",
          "text": "Improper Validation of Specified Quantity in Input",
          "title": "CWE-1284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-271904",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-94309",
          "CSAFPID-912053",
          "CSAFPID-45194",
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-38709",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-38709.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-271904",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-94309",
            "CSAFPID-912053",
            "CSAFPID-45194",
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2023-38709"
    },
    {
      "cve": "CVE-2023-39410",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1260",
          "CSAFPID-1973",
          "CSAFPID-3660",
          "CSAFPID-9642",
          "CSAFPID-40303",
          "CSAFPID-45194",
          "CSAFPID-94309",
          "CSAFPID-204581",
          "CSAFPID-220164",
          "CSAFPID-271904"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-39410",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39410.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1260",
            "CSAFPID-1973",
            "CSAFPID-3660",
            "CSAFPID-9642",
            "CSAFPID-40303",
            "CSAFPID-45194",
            "CSAFPID-94309",
            "CSAFPID-204581",
            "CSAFPID-220164",
            "CSAFPID-271904"
          ]
        }
      ],
      "title": "CVE-2023-39410"
    },
    {
      "cve": "CVE-2023-44483",
      "cwe": {
        "id": "CWE-532",
        "name": "Insertion of Sensitive Information into Log File"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insertion of Sensitive Information into Log File",
          "title": "CWE-532"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1260",
          "CSAFPID-1973",
          "CSAFPID-3660",
          "CSAFPID-9642",
          "CSAFPID-40303",
          "CSAFPID-45194",
          "CSAFPID-94309",
          "CSAFPID-204581",
          "CSAFPID-220164",
          "CSAFPID-271904",
          "CSAFPID-94393",
          "CSAFPID-226018",
          "CSAFPID-912053",
          "CSAFPID-912074",
          "CSAFPID-228157"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-44483",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44483.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1260",
            "CSAFPID-1973",
            "CSAFPID-3660",
            "CSAFPID-9642",
            "CSAFPID-40303",
            "CSAFPID-45194",
            "CSAFPID-94309",
            "CSAFPID-204581",
            "CSAFPID-220164",
            "CSAFPID-271904",
            "CSAFPID-94393",
            "CSAFPID-226018",
            "CSAFPID-912053",
            "CSAFPID-912074",
            "CSAFPID-228157"
          ]
        }
      ],
      "title": "CVE-2023-44483"
    },
    {
      "cve": "CVE-2023-49582",
      "cwe": {
        "id": "CWE-732",
        "name": "Incorrect Permission Assignment for Critical Resource"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Permission Assignment for Critical Resource",
          "title": "CWE-732"
        },
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-49582",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-49582.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2023-49582"
    },
    {
      "cve": "CVE-2023-51775",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-332789",
          "CSAFPID-342815",
          "CSAFPID-1674670",
          "CSAFPID-503474",
          "CSAFPID-1260",
          "CSAFPID-1973",
          "CSAFPID-3660",
          "CSAFPID-40303",
          "CSAFPID-45194",
          "CSAFPID-94309",
          "CSAFPID-94393",
          "CSAFPID-204581",
          "CSAFPID-220164",
          "CSAFPID-226018",
          "CSAFPID-912053",
          "CSAFPID-912074",
          "CSAFPID-228157",
          "CSAFPID-271904"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-51775",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51775.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-332789",
            "CSAFPID-342815",
            "CSAFPID-1674670",
            "CSAFPID-503474",
            "CSAFPID-1260",
            "CSAFPID-1973",
            "CSAFPID-3660",
            "CSAFPID-40303",
            "CSAFPID-45194",
            "CSAFPID-94309",
            "CSAFPID-94393",
            "CSAFPID-204581",
            "CSAFPID-220164",
            "CSAFPID-226018",
            "CSAFPID-912053",
            "CSAFPID-912074",
            "CSAFPID-228157",
            "CSAFPID-271904"
          ]
        }
      ],
      "title": "CVE-2023-51775"
    },
    {
      "cve": "CVE-2024-5535",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "other",
          "text": "Exposure of Sensitive Information to an Unauthorized Actor",
          "title": "CWE-200"
        },
        {
          "category": "other",
          "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
          "title": "CWE-119"
        },
        {
          "category": "other",
          "text": "Dependency on Vulnerable Third-Party Component",
          "title": "CWE-1395"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-5535",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-5535"
    },
    {
      "cve": "CVE-2024-6119",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
          "title": "CWE-843"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-6119",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6119.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-6119"
    },
    {
      "cve": "CVE-2024-8096",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Certificate Validation",
          "title": "CWE-295"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-8096",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-8096.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-8096"
    },
    {
      "cve": "CVE-2024-23635",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
          "title": "CWE-79"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1260",
          "CSAFPID-1973",
          "CSAFPID-3660",
          "CSAFPID-40303",
          "CSAFPID-45194",
          "CSAFPID-94309",
          "CSAFPID-94393",
          "CSAFPID-204581",
          "CSAFPID-220164",
          "CSAFPID-226018",
          "CSAFPID-912053",
          "CSAFPID-912074",
          "CSAFPID-228157",
          "CSAFPID-271904"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-23635",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23635.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1260",
            "CSAFPID-1973",
            "CSAFPID-3660",
            "CSAFPID-40303",
            "CSAFPID-45194",
            "CSAFPID-94309",
            "CSAFPID-94393",
            "CSAFPID-204581",
            "CSAFPID-220164",
            "CSAFPID-226018",
            "CSAFPID-912053",
            "CSAFPID-912074",
            "CSAFPID-228157",
            "CSAFPID-271904"
          ]
        }
      ],
      "title": "CVE-2024-23635"
    },
    {
      "cve": "CVE-2024-29857",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        },
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        },
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-271904",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-94309",
          "CSAFPID-912053",
          "CSAFPID-45194",
          "CSAFPID-3660",
          "CSAFPID-1973",
          "CSAFPID-1747074",
          "CSAFPID-1674670",
          "CSAFPID-503474"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-29857",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-29857.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-271904",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-94309",
            "CSAFPID-912053",
            "CSAFPID-45194",
            "CSAFPID-3660",
            "CSAFPID-1973",
            "CSAFPID-1747074",
            "CSAFPID-1674670",
            "CSAFPID-503474"
          ]
        }
      ],
      "title": "CVE-2024-29857"
    },
    {
      "cve": "CVE-2024-30171",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "notes": [
        {
          "category": "other",
          "text": "Observable Timing Discrepancy",
          "title": "CWE-208"
        },
        {
          "category": "other",
          "text": "Observable Discrepancy",
          "title": "CWE-203"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-271904",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-94309",
          "CSAFPID-912053",
          "CSAFPID-45194",
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-30171",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-30171.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-271904",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-94309",
            "CSAFPID-912053",
            "CSAFPID-45194",
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2024-30171"
    },
    {
      "cve": "CVE-2024-30172",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
          "title": "CWE-835"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-271904",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-94309",
          "CSAFPID-912053",
          "CSAFPID-45194",
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-30172",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-30172.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-271904",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-94309",
            "CSAFPID-912053",
            "CSAFPID-45194",
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2024-30172"
    },
    {
      "cve": "CVE-2024-34447",
      "cwe": {
        "id": "CWE-706",
        "name": "Use of Incorrectly-Resolved Name or Reference"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Incorrectly-Resolved Name or Reference",
          "title": "CWE-706"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-271904",
          "CSAFPID-40303",
          "CSAFPID-220164",
          "CSAFPID-94309",
          "CSAFPID-912053",
          "CSAFPID-45194",
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34447",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34447.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-271904",
            "CSAFPID-40303",
            "CSAFPID-220164",
            "CSAFPID-94309",
            "CSAFPID-912053",
            "CSAFPID-45194",
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2024-34447"
    },
    {
      "cve": "CVE-2024-34750",
      "cwe": {
        "id": "CWE-755",
        "name": "Improper Handling of Exceptional Conditions"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Exceptional Conditions",
          "title": "CWE-755"
        },
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-204581"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-34750",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-34750.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-204581"
          ]
        }
      ],
      "title": "CVE-2024-34750"
    },
    {
      "cve": "CVE-2024-37370",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Length Parameter Inconsistency",
          "title": "CWE-130"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-199820"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-37370",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37370.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-199820"
          ]
        }
      ],
      "title": "CVE-2024-37370"
    },
    {
      "cve": "CVE-2024-37371",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Length Parameter Inconsistency",
          "title": "CWE-130"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-199820"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-37371",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-37371.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-199820"
          ]
        }
      ],
      "title": "CVE-2024-37371"
    },
    {
      "cve": "CVE-2024-38473",
      "cwe": {
        "id": "CWE-172",
        "name": "Encoding Error"
      },
      "notes": [
        {
          "category": "other",
          "text": "Encoding Error",
          "title": "CWE-172"
        },
        {
          "category": "other",
          "text": "Improper Encoding or Escaping of Output",
          "title": "CWE-116"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38473",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38473.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-38473"
    },
    {
      "cve": "CVE-2024-38475",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        },
        {
          "category": "other",
          "text": "Improper Encoding or Escaping of Output",
          "title": "CWE-116"
        },
        {
          "category": "other",
          "text": "Path Traversal: \u0027.../...//\u0027",
          "title": "CWE-35"
        },
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "other",
          "text": "Heap-based Buffer Overflow",
          "title": "CWE-122"
        },
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        },
        {
          "category": "other",
          "text": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)",
          "title": "CWE-338"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38475",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38475.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-38475"
    },
    {
      "cve": "CVE-2024-38816",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "other",
          "text": "Relative Path Traversal",
          "title": "CWE-23"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-94309",
          "CSAFPID-220164"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38816",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38816.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-94309",
            "CSAFPID-220164"
          ]
        }
      ],
      "title": "CVE-2024-38816"
    },
    {
      "cve": "CVE-2024-38819",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-94309",
          "CSAFPID-220164"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38819",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38819.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-94309",
            "CSAFPID-220164"
          ]
        }
      ],
      "title": "CVE-2024-38819"
    },
    {
      "cve": "CVE-2024-38998",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "title": "CWE-1321"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157",
          "CSAFPID-9642",
          "CSAFPID-226018",
          "CSAFPID-45194"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38998",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38998.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157",
            "CSAFPID-9642",
            "CSAFPID-226018",
            "CSAFPID-45194"
          ]
        }
      ],
      "title": "CVE-2024-38998"
    },
    {
      "cve": "CVE-2024-38999",
      "cwe": {
        "id": "CWE-1321",
        "name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)",
          "title": "CWE-1321"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-9642",
          "CSAFPID-228157",
          "CSAFPID-332789",
          "CSAFPID-342815",
          "CSAFPID-271904",
          "CSAFPID-1674670",
          "CSAFPID-503474",
          "CSAFPID-226018",
          "CSAFPID-45194"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38999",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-38999.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-9642",
            "CSAFPID-228157",
            "CSAFPID-332789",
            "CSAFPID-342815",
            "CSAFPID-271904",
            "CSAFPID-1674670",
            "CSAFPID-503474",
            "CSAFPID-226018",
            "CSAFPID-45194"
          ]
        }
      ],
      "title": "CVE-2024-38999"
    },
    {
      "cve": "CVE-2024-40898",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Server-Side Request Forgery (SSRF)",
          "title": "CWE-918"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-40898",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-40898.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-40898"
    },
    {
      "cve": "CVE-2024-45490",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "other",
          "text": "Incorrect Calculation of Buffer Size",
          "title": "CWE-131"
        },
        {
          "category": "other",
          "text": "Improper Restriction of XML External Entity Reference",
          "title": "CWE-611"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-912053",
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-45490",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45490.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-912053",
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-45490"
    },
    {
      "cve": "CVE-2024-45491",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-912053",
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-45491",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45491.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-912053",
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-45491"
    },
    {
      "cve": "CVE-2024-45492",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-912053",
          "CSAFPID-332789",
          "CSAFPID-342815",
          "CSAFPID-271904",
          "CSAFPID-1674670",
          "CSAFPID-503474",
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-45492",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45492.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-912053",
            "CSAFPID-332789",
            "CSAFPID-342815",
            "CSAFPID-271904",
            "CSAFPID-1674670",
            "CSAFPID-503474",
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2024-45492"
    },
    {
      "cve": "CVE-2024-47072",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "other",
          "text": "Stack-based Buffer Overflow",
          "title": "CWE-121"
        },
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-228157"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47072",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47072.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-228157"
          ]
        }
      ],
      "title": "CVE-2024-47072"
    },
    {
      "cve": "CVE-2024-47554",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1751293",
          "CSAFPID-45194",
          "CSAFPID-1973",
          "CSAFPID-3660"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47554",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47554.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1751293",
            "CSAFPID-45194",
            "CSAFPID-1973",
            "CSAFPID-3660"
          ]
        }
      ],
      "title": "CVE-2024-47554"
    },
    {
      "cve": "CVE-2024-47561",
      "cwe": {
        "id": "CWE-502",
        "name": "Deserialization of Untrusted Data"
      },
      "notes": [
        {
          "category": "other",
          "text": "Deserialization of Untrusted Data",
          "title": "CWE-502"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-9642"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47561",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47561.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-9642"
          ]
        }
      ],
      "title": "CVE-2024-47561"
    },
    {
      "cve": "CVE-2025-21498",
      "product_status": {
        "known_affected": [
          "CSAFPID-40303"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21498",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21498.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-40303"
          ]
        }
      ],
      "title": "CVE-2025-21498"
    },
    {
      "cve": "CVE-2025-21535",
      "product_status": {
        "known_affected": [
          "CSAFPID-3660",
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21535",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21535.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-3660",
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2025-21535"
    },
    {
      "cve": "CVE-2025-21549",
      "product_status": {
        "known_affected": [
          "CSAFPID-1973"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21549",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21549.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1973"
          ]
        }
      ],
      "title": "CVE-2025-21549"
    }
  ]
}

RHSA-2024:4197

Vulnerability from csaf_redhat - Published: 2024-07-01 08:12 - Updated: 2026-06-28 12:44

Summary

Red Hat Security Advisory: httpd:2.4/httpd security update

Severity

Moderate

Notes

Topic: An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-38709

A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 85 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

9 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:4197	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:4197",
        "url": "https://access.redhat.com/errata/RHSA-2024:4197"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4197.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd:2.4/httpd security update",
    "tracking": {
      "current_release_date": "2026-06-28T12:44:02+00:00",
      "generator": {
        "date": "2026-06-28T12:44:02+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2024:4197",
      "initial_release_date": "2024-07-01T08:12:32+00:00",
      "revision_history": [
        {
          "date": "2024-07-01T08:12:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-07-01T08:12:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-28T12:44:02+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=src\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=src\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=src\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch (httpd:2.4)",
                  "product_id": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=noarch\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
                "product": {
                  "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch (httpd:2.4)",
                  "product_id": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=noarch\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4)",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4)",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4)",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1\u0026rpmmod=httpd:2.4:8100020240612075645:489197e6"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4"
        },
        "product_reference": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4"
        },
        "product_reference": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
          "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-07-01T08:12:32+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:4197"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x::httpd:2.4",
            "AppStream-8.10.0.Z.MAIN.EUS:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64::httpd:2.4"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    }
  ]
}

RHSA-2024:6927

Vulnerability from csaf_redhat - Published: 2024-09-24 11:46 - Updated: 2026-06-30 03:18

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

Severity

Moderate

Notes

Topic: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section. Security Fix(es): * jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709) * jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544) A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 27 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64	—	Workaround

Threats

Impact Moderate

CVE-2024-46544

An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-276 - Incorrect Default Permissions

Affected products

Fixed 6 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Vendor Fix fix Workaround

Known not affected 51 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Workaround

Threats

Impact Moderate

References

16 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:6927	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-46544	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://www.cve.org/CVERecord?id=CVE-2024-46544	external
https://nvd.nist.gov/vuln/detail/CVE-2024-46544	external
https://lists.apache.org/thread/q1gp7cc38hs1r8gj8…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709)\n* jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:6927",
        "url": "https://access.redhat.com/errata/RHSA-2024:6927"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2314194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6927.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update",
    "tracking": {
      "current_release_date": "2026-06-30T03:18:39+00:00",
      "generator": {
        "date": "2026-06-30T03:18:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2024:6927",
      "initial_release_date": "2024-09-24T11:46:28+00:00",
      "revision_history": [
        {
          "date": "2024-09-24T11:46:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-10-07T14:28:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T03:18:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 8",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 8",
                  "product_id": "8Base-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.50-3.redhat_1.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el7jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.50-3.redhat_1.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el8jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el8jbcs?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.57-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.57-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-43.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.50-3.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.50-3.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.24-13.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.20-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-42.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-43.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.50-3.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo@1.2.50-3.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.24-13.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.20-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-42.el8jbcs?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.57-15.el7jbcs?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.57-15.el8jbcs?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:46:28+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6927"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-46544",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "discovery_date": "2024-09-23T11:20:24.516828+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_jk: information Disclosure / DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-46544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d",
          "url": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d"
        }
      ],
      "release_date": "2024-09-23T11:15:10.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:46:28+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6927"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_jk: information Disclosure / DoS"
    }
  ]
}

RHSA-2024:6928

Vulnerability from csaf_redhat - Published: 2024-09-24 11:48 - Updated: 2026-06-30 03:18

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

Severity

Important

Notes

Topic: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section. Security Fix(es): * httpd: SSRF in Apache HTTP Server on Windows (CVE-2024-38472) * httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context (CVE-2024-40898) * jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709) * jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544) A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Text-Only JBCS Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-38472

A flaw was found in httpd on Windows systems. This issue potentially allows NTLM hashes to be leaked to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Text-Only JBCS Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix

Threats

Impact Important

CVE-2024-40898

A flaw was found in HTTPd on Windows systems. This issue potentially allows NTLM hashes to be leaked via mod_rewrite in server/vhost context to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Text-Only JBCS Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-46544

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-276 - Incorrect Default Permissions

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Text-Only JBCS Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

28 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:6928	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2295011	external
https://bugzilla.redhat.com/show_bug.cgi?id=2298648	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-38472	self
https://bugzilla.redhat.com/show_bug.cgi?id=2295011	external
https://www.cve.org/CVERecord?id=CVE-2024-38472	external
https://nvd.nist.gov/vuln/detail/CVE-2024-38472	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-40898	self
https://bugzilla.redhat.com/show_bug.cgi?id=2298648	external
https://www.cve.org/CVERecord?id=CVE-2024-40898	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40898	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-46544	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://www.cve.org/CVERecord?id=CVE-2024-46544	external
https://nvd.nist.gov/vuln/detail/CVE-2024-46544	external
https://lists.apache.org/thread/q1gp7cc38hs1r8gj8…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* httpd: SSRF in Apache HTTP Server on Windows (CVE-2024-38472)\n* httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context (CVE-2024-40898)\n* jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709)\n* jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:6928",
        "url": "https://access.redhat.com/errata/RHSA-2024:6928"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2295011",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295011"
      },
      {
        "category": "external",
        "summary": "2298648",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298648"
      },
      {
        "category": "external",
        "summary": "2314194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6928.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update",
    "tracking": {
      "current_release_date": "2026-06-30T03:18:41+00:00",
      "generator": {
        "date": "2026-06-30T03:18:41+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2024:6928",
      "initial_release_date": "2024-09-24T11:48:26+00:00",
      "revision_history": [
        {
          "date": "2024-09-24T11:48:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-10-01T11:35:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T03:18:41+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Text-Only JBCS",
                "product": {
                  "name": "Text-Only JBCS",
                  "product_id": "Text-Only JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only JBCS"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only JBCS"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Text-Only JBCS"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only JBCS"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-38472",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2024-07-01T19:21:24+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295011"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd on Windows systems. This issue potentially allows NTLM hashes to be leaked to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: SSRF in Apache HTTP Server on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects httpd running on Windows systems. Therefore, the httpd package as shipped in Red Hat Enterprise Linux 6, 7, 8 and 9 is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only JBCS"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295011",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295011"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-38472",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-38472",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38472",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38472"
        }
      ],
      "release_date": "2024-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only JBCS"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only JBCS"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: SSRF in Apache HTTP Server on Windows"
    },
    {
      "cve": "CVE-2024-40898",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2024-07-18T10:20:10+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2298648"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTPd on Windows systems. This issue potentially allows NTLM hashes to be leaked via mod_rewrite in server/vhost context to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects HTTPd running on Windows systems. Therefore, the HTTPd package as shipped in Red Hat Enterprise Linux 6, 7, 8 and 9 is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only JBCS"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "RHBZ#2298648",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298648"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40898",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40898",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2024-07-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only JBCS"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Text-Only JBCS"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Text-Only JBCS"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context"
    },
    {
      "cve": "CVE-2024-46544",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "discovery_date": "2024-09-23T11:20:24.516828+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_jk: information Disclosure / DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Text-Only JBCS"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-46544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d",
          "url": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d"
        }
      ],
      "release_date": "2024-09-23T11:15:10.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Text-Only JBCS"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Text-Only JBCS"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Text-Only JBCS"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_jk: information Disclosure / DoS"
    }
  ]
}

RHSA-2024:9306

Vulnerability from csaf_redhat - Published: 2024-11-12 09:33 - Updated: 2026-06-28 12:47

Summary

Red Hat Security Advisory: httpd security update

Severity

Moderate

Notes

Topic: An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: HTTP response splitting (CVE-2023-38709) * httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Affected products

Fixed 75 products

Product	Version	Remediation
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-24795

A flaw was found in httpd. An HTTP response splitting in multiple httpd modules may allow an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.

4.0 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 75 products

Product	Version	Remediation
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

References

20 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:9306	self
https://docs.redhat.com/en/documentation/red_hat_…	external
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273499	external
https://issues.redhat.com/browse/RHEL-14668	external
https://issues.redhat.com/browse/RHEL-49856	external
https://issues.redhat.com/browse/RHEL-6575	external
https://issues.redhat.com/browse/RHEL-6576	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-24795	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273499	external
https://www.cve.org/CVERecord?id=CVE-2024-24795	external
https://nvd.nist.gov/vuln/detail/CVE-2024-24795	external
https://httpd.apache.org/security/vulnerabilities…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for httpd is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: HTTP response splitting (CVE-2023-38709)\n\n* httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9306",
        "url": "https://access.redhat.com/errata/RHSA-2024:9306"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2273499",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499"
      },
      {
        "category": "external",
        "summary": "RHEL-14668",
        "url": "https://issues.redhat.com/browse/RHEL-14668"
      },
      {
        "category": "external",
        "summary": "RHEL-49856",
        "url": "https://issues.redhat.com/browse/RHEL-49856"
      },
      {
        "category": "external",
        "summary": "RHEL-6575",
        "url": "https://issues.redhat.com/browse/RHEL-6575"
      },
      {
        "category": "external",
        "summary": "RHEL-6576",
        "url": "https://issues.redhat.com/browse/RHEL-6576"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9306.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd security update",
    "tracking": {
      "current_release_date": "2026-06-28T12:47:04+00:00",
      "generator": {
        "date": "2026-06-28T12:47:04+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2024:9306",
      "initial_release_date": "2024-11-12T09:33:27+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T09:33:27+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T09:33:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-28T12:47:04+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.src",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.src",
                  "product_id": "httpd-0:2.4.62-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-core-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_lua-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_session-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-core-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_lua-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_session-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-core-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_lua-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_session-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-core-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_lua-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_session-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                "product": {
                  "name": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                  "product_id": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.62-1.el9?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.62-1.el9.noarch",
                "product": {
                  "name": "httpd-manual-0:2.4.62-1.el9.noarch",
                  "product_id": "httpd-manual-0:2.4.62-1.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.62-1.el9?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.62-1.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch"
        },
        "product_reference": "httpd-filesystem-0:2.4.62-1.el9.noarch",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.62-1.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch"
        },
        "product_reference": "httpd-manual-0:2.4.62-1.el9.noarch",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:33:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9306"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-24795",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273499"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. An HTTP response splitting in multiple httpd modules may allow an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP Response Splitting in multiple modules",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects configurations when at least one of the following modules is loaded and being used: mod_authnz_fcgi, mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi and mod_proxy_uwsgi. Additionally, this flaw is only exploitable by a malicious backend in a reverse proxy configuration or an attack against a backend application that inserts headers.\n\nThese modules are enabled by default in Red Hat Enterprise Linux 8, 9, and in RHSCL mod_authnz_fcgi is not available in RHEL8 and RHSCL. These modules can be disabled via the configuration file if their functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273499",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:33:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9306"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: HTTP Response Splitting in multiple modules"
    }
  ]
}

RHSA-2024_4197

Vulnerability from csaf_redhat - Published: 2024-07-01 08:12 - Updated: 2024-11-24 16:59

Summary

Red Hat Security Advisory: httpd:2.4/httpd security update

Severity

Moderate

Notes

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 86 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

9 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:4197	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:4197",
        "url": "https://access.redhat.com/errata/RHSA-2024:4197"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4197.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd:2.4/httpd security update",
    "tracking": {
      "current_release_date": "2024-11-24T16:59:27+00:00",
      "generator": {
        "date": "2024-11-24T16:59:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:4197",
      "initial_release_date": "2024-07-01T08:12:32+00:00",
      "revision_history": [
        {
          "date": "2024-07-01T08:12:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-07-01T08:12:32+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-24T16:59:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd:2.4:8100020240612075645:489197e6",
                "product": {
                  "name": "httpd:2.4:8100020240612075645:489197e6",
                  "product_id": "httpd:2.4:8100020240612075645:489197e6",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/httpd@2.4:8100020240612075645:489197e6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                "product": {
                  "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                  "product_id": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                "product": {
                  "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                  "product_id": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                "product": {
                  "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_id": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_id": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-10.module%2Bel8.10.0%2B21653%2Beaff63f0?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.9.0%2B19080%2B567b90f8?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-65.module%2Bel8.10.0%2B21982%2B14717793?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
        },
        "product_reference": "httpd:2.4:8100020240612075645:489197e6",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch"
        },
        "product_reference": "httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch"
        },
        "product_reference": "httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64"
        },
        "product_reference": "mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64 as a component of httpd:2.4:8100020240612075645:489197e6 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
          "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-07-01T08:12:32+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:4197"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-debugsource-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-devel-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-filesystem-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-manual-0:2.4.37-65.module+el8.10.0+21982+14717793.noarch",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+21653+eaff63f0.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.src",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_md-debugsource-1:2.0.8-8.module+el8.9.0+19080+567b90f8.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.aarch64",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.ppc64le",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.s390x",
            "AppStream-8.10.0.Z.MAIN.EUS:httpd:2.4:8100020240612075645:489197e6:mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+21982+14717793.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    }
  ]
}

RHSA-2024_6927

Vulnerability from csaf_redhat - Published: 2024-09-24 11:46 - Updated: 2024-11-24 18:45

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

Severity

Moderate

Notes

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 27 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Vendor Fix fix Workaround

Known not affected 30 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64	—	Workaround

Threats

Impact Moderate

CVE-2024-46544

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-276 - Incorrect Default Permissions

Affected products

Fixed 6 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64	—	Vendor Fix fix Workaround

Known not affected 51 products

Product	Version	Remediation
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64	—	Workaround
Unresolved product id: 8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64	—	Workaround

Threats

Impact Moderate

References

16 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:6927	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-46544	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://www.cve.org/CVERecord?id=CVE-2024-46544	external
https://nvd.nist.gov/vuln/detail/CVE-2024-46544	external
https://lists.apache.org/thread/q1gp7cc38hs1r8gj8…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709)\n* jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:6927",
        "url": "https://access.redhat.com/errata/RHSA-2024:6927"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2314194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6927.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update",
    "tracking": {
      "current_release_date": "2024-11-24T18:45:45+00:00",
      "generator": {
        "date": "2024-11-24T18:45:45+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:6927",
      "initial_release_date": "2024-09-24T11:46:28+00:00",
      "revision_history": [
        {
          "date": "2024-09-24T11:46:28+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-10-07T14:28:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-24T18:45:45+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 8",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 8",
                  "product_id": "8Base-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.50-3.redhat_1.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el7jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.50-3.redhat_1.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el8jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el8jbcs?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.57-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.57-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.57-15.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-43.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.50-3.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.50-3.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.24-13.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.20-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-42.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo@2.4.57-15.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo@2.4.57-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-43.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-43.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.50-3.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo@1.2.50-3.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.24-13.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.24-13.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.20-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.20-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-42.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-42.el8jbcs?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.57-15.el7jbcs?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.57-15.el8jbcs?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:46:28+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6927"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-46544",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "discovery_date": "2024-09-23T11:20:24.516828+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_jk: information Disclosure / DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-46544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d",
          "url": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d"
        }
      ],
      "release_date": "2024-09-23T11:15:10.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:46:28+00:00",
          "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6927"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.57-15.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-43.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.24-13.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.20-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-42.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.57-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.57-15.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-3.redhat_1.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.50-3.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.50-3.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.50-3.redhat_1.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_jk: information Disclosure / DoS"
    }
  ]
}

RHSA-2024_6928

Vulnerability from csaf_redhat - Published: 2024-09-24 11:48 - Updated: 2024-11-24 18:45

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

Severity

Important

Notes

Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience. This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section. Security Fix(es): * httpd: SSRF in Apache HTTP Server on Windows (CVE-2024-38472) * httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context (CVE-2024-40898) * jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709) * jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544) A Red Hat Security Bulletin which addresses further details about this flaw is available in the References section. For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Red Hat JBoss Core Services 1 Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-38472

A flaw was found in httpd on Windows systems. This issue potentially allows NTLM hashes to be leaked to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Red Hat JBoss Core Services 1 Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix

Threats

Impact Important

CVE-2024-40898

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Red Hat JBoss Core Services 1 Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-46544

5.9 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-276 - Incorrect Default Permissions

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Red Hat JBoss Core Services 1 Red Hat / Red Hat JBoss Core Services	`cpe:/a:redhat:jboss_core_services:1`	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

28 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:6928	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2295011	external
https://bugzilla.redhat.com/show_bug.cgi?id=2298648	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-38472	self
https://bugzilla.redhat.com/show_bug.cgi?id=2295011	external
https://www.cve.org/CVERecord?id=CVE-2024-38472	external
https://nvd.nist.gov/vuln/detail/CVE-2024-38472	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-40898	self
https://bugzilla.redhat.com/show_bug.cgi?id=2298648	external
https://www.cve.org/CVERecord?id=CVE-2024-40898	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40898	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-46544	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314194	external
https://www.cve.org/CVERecord?id=CVE-2024-46544	external
https://nvd.nist.gov/vuln/detail/CVE-2024-46544	external
https://lists.apache.org/thread/q1gp7cc38hs1r8gj8…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 is now available.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 6 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 5, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* httpd: SSRF in Apache HTTP Server on Windows (CVE-2024-38472)\n* httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context (CVE-2024-40898)\n* jbcs-httpd24-httpd: HTTP response splitting (CVE-2023-38709)\n* jbcs-httpd24-mod_jk: information Disclosure / DoS (CVE-2024-46544)\n\nA Red Hat Security Bulletin which addresses further details about this flaw is available in the References section.\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:6928",
        "url": "https://access.redhat.com/errata/RHSA-2024:6928"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2295011",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295011"
      },
      {
        "category": "external",
        "summary": "2298648",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298648"
      },
      {
        "category": "external",
        "summary": "2314194",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6928.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update",
    "tracking": {
      "current_release_date": "2024-11-24T18:45:55+00:00",
      "generator": {
        "date": "2024-11-24T18:45:55+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:6928",
      "initial_release_date": "2024-09-24T11:48:26+00:00",
      "revision_history": [
        {
          "date": "2024-09-24T11:48:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-10-01T11:35:56+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-24T18:45:55+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 1",
                "product": {
                  "name": "Red Hat JBoss Core Services 1",
                  "product_id": "Red Hat JBoss Core Services 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-38472",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2024-07-01T19:21:24+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2295011"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd on Windows systems. This issue potentially allows NTLM hashes to be leaked to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: SSRF in Apache HTTP Server on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects httpd running on Windows systems. Therefore, the httpd package as shipped in Red Hat Enterprise Linux 6, 7, 8 and 9 is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "RHBZ#2295011",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295011"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-38472",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-38472",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38472"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38472",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38472"
        }
      ],
      "release_date": "2024-07-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: SSRF in Apache HTTP Server on Windows"
    },
    {
      "cve": "CVE-2024-40898",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2024-07-18T10:20:10+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2298648"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in HTTPd on Windows systems. This issue potentially allows NTLM hashes to be leaked via mod_rewrite in server/vhost context to a malicious server via Server-side request forgery (SSRF) and malicious requests or content.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects HTTPd running on Windows systems. Therefore, the HTTPd package as shipped in Red Hat Enterprise Linux 6, 7, 8 and 9 is not affected by this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "RHBZ#2298648",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2298648"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40898",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40898",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40898"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2024-07-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context"
    },
    {
      "cve": "CVE-2024-46544",
      "cwe": {
        "id": "CWE-276",
        "name": "Incorrect Default Permissions"
      },
      "discovery_date": "2024-09-23T11:20:24.516828+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314194"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing mod_jk configuration, which may lead to information disclosure and denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "mod_jk: information Disclosure / DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314194",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314194"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-46544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d",
          "url": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d"
        }
      ],
      "release_date": "2024-09-23T11:15:10.563000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-24T11:48:26+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link. You must be logged in to download the update.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:6928"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "mod_jk: information Disclosure / DoS"
    }
  ]
}

RHSA-2024_9306

Vulnerability from csaf_redhat - Published: 2024-11-12 09:33 - Updated: 2024-12-03 03:50

Summary

Red Hat Security Advisory: httpd security update

Severity

Moderate

Notes

CVE-2023-38709

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 75 products

Product	Version	Remediation
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-24795

4.0 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Affected products

Fixed 75 products

Product	Version	Remediation
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Low

References

20 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:9306	self
https://docs.redhat.com/en/documentation/red_hat_…	external
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://bugzilla.redhat.com/show_bug.cgi?id=2273499	external
https://issues.redhat.com/browse/RHEL-14668	external
https://issues.redhat.com/browse/RHEL-49856	external
https://issues.redhat.com/browse/RHEL-6575	external
https://issues.redhat.com/browse/RHEL-6576	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-38709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273491	external
https://www.cve.org/CVERecord?id=CVE-2023-38709	external
https://nvd.nist.gov/vuln/detail/CVE-2023-38709	external
https://httpd.apache.org/security/vulnerabilities…	external
https://access.redhat.com/security/cve/CVE-2024-24795	self
https://bugzilla.redhat.com/show_bug.cgi?id=2273499	external
https://www.cve.org/CVERecord?id=CVE-2024-24795	external
https://nvd.nist.gov/vuln/detail/CVE-2024-24795	external
https://httpd.apache.org/security/vulnerabilities…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for httpd is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: HTTP response splitting (CVE-2023-38709)\n\n* httpd: HTTP Response Splitting in multiple modules (CVE-2024-24795)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:9306",
        "url": "https://access.redhat.com/errata/RHSA-2024:9306"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2273491",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
      },
      {
        "category": "external",
        "summary": "2273499",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499"
      },
      {
        "category": "external",
        "summary": "RHEL-14668",
        "url": "https://issues.redhat.com/browse/RHEL-14668"
      },
      {
        "category": "external",
        "summary": "RHEL-49856",
        "url": "https://issues.redhat.com/browse/RHEL-49856"
      },
      {
        "category": "external",
        "summary": "RHEL-6575",
        "url": "https://issues.redhat.com/browse/RHEL-6575"
      },
      {
        "category": "external",
        "summary": "RHEL-6576",
        "url": "https://issues.redhat.com/browse/RHEL-6576"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9306.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd security update",
    "tracking": {
      "current_release_date": "2024-12-03T03:50:59+00:00",
      "generator": {
        "date": "2024-12-03T03:50:59+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2024:9306",
      "initial_release_date": "2024-11-12T09:33:27+00:00",
      "revision_history": [
        {
          "date": "2024-11-12T09:33:27+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2024-11-12T09:33:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-12-03T03:50:59+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.5.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.src",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.src",
                  "product_id": "httpd-0:2.4.62-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-core-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_lua-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_session-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-core-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_lua-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_session-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-core-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_lua-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_session-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-core-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-core-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-devel-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-devel-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-tools-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-tools-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ldap-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_ldap-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_lua-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_lua-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_proxy_html-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_session-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_session-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ssl-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_ssl-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-debugsource-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-core-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_lua-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_id": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.62-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_id": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.62-1.el9?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                "product": {
                  "name": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                  "product_id": "httpd-filesystem-0:2.4.62-1.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.62-1.el9?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.62-1.el9.noarch",
                "product": {
                  "name": "httpd-manual-0:2.4.62-1.el9.noarch",
                  "product_id": "httpd-manual-0:2.4.62-1.el9.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.62-1.el9?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.src",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-core-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-debugsource-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-devel-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.62-1.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch"
        },
        "product_reference": "httpd-filesystem-0:2.4.62-1.el9.noarch",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.62-1.el9.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch"
        },
        "product_reference": "httpd-manual-0:2.4.62-1.el9.noarch",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-tools-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ldap-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_lua-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_proxy_html-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_session-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ssl-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.5.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-38709",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273491"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers, resulting in an HTTP response splitting.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP response splitting",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw is only exploitable by a malicious backend or a malicious application, but may also affect forward proxy configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273491",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273491"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-38709",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38709"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:33:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9306"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: HTTP response splitting"
    },
    {
      "cve": "CVE-2024-24795",
      "cwe": {
        "id": "CWE-113",
        "name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
      },
      "discovery_date": "2024-04-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2273499"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd. An HTTP response splitting in multiple httpd modules may allow an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: HTTP Response Splitting in multiple modules",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw only affects configurations when at least one of the following modules is loaded and being used: mod_authnz_fcgi, mod_cgi, mod_cgid, mod_proxy_fcgi, mod_proxy_scgi and mod_proxy_uwsgi. Additionally, this flaw is only exploitable by a malicious backend in a reverse proxy configuration or an attack against a backend application that inserts headers.\n\nThese modules are enabled by default in Red Hat Enterprise Linux 8, 9, and in RHSCL mod_authnz_fcgi is not available in RHEL8 and RHSCL. These modules can be disabled via the configuration file if their functionality is not being used.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
          "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
          "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "RHBZ#2273499",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2273499"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-24795",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24795",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24795"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795"
        }
      ],
      "release_date": "2024-04-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-11-12T09:33:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:9306"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.src",
            "AppStream-9.5.0.GA:httpd-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-core-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-debugsource-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-devel-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-filesystem-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-manual-0:2.4.62-1.el9.noarch",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:httpd-tools-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ldap-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_lua-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_proxy_html-debuginfo-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_session-debuginfo-0:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-1:2.4.62-1.el9.x86_64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.aarch64",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.ppc64le",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.s390x",
            "AppStream-9.5.0.GA:mod_ssl-debuginfo-1:2.4.62-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: HTTP Response Splitting in multiple modules"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2023-38709 (GCVE-0-2023-38709)

Tags

Sightings

Nomenclature