Search for packages
| purl | pkg:rpm/redhat/jboss-as-controller@7.5.13-2.Final_redhat_2.1.ep6?arch=el6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3r3s-q21j-c3au
Aliases: CVE-2016-6816 GHSA-jc7p-5r39-9477 |
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own. | There are no reported fixed by versions. |
|
VCID-e6qx-uhr4-kqb8
Aliases: CVE-2016-8627 |
admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files | There are no reported fixed by versions. |
|
VCID-hexa-jm8k-y3hc
Aliases: CVE-2016-8656 |
jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation | There are no reported fixed by versions. |
|
VCID-wpvb-dr22-bfde
Aliases: CVE-2016-7061 |
EAP: Sensitive data can be exposed at the server level in domain mode | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:35:01.819775+00:00 | RedHat Importer | Affected by | VCID-hexa-jm8k-y3hc | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json | 38.0.0 |
| 2026-04-01T14:33:34.001864+00:00 | RedHat Importer | Affected by | VCID-wpvb-dr22-bfde | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json | 38.0.0 |
| 2026-04-01T14:33:14.435176+00:00 | RedHat Importer | Affected by | VCID-3r3s-q21j-c3au | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json | 38.0.0 |
| 2026-04-01T14:32:26.603175+00:00 | RedHat Importer | Affected by | VCID-e6qx-uhr4-kqb8 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json | 38.0.0 |