Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/jboss-as-jaxr@7.5.13-2.Final_redhat_2.1.ep6?arch=el6
purl pkg:rpm/redhat/jboss-as-jaxr@7.5.13-2.Final_redhat_2.1.ep6?arch=el6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-91nw-m5n9-g7fn
Aliases:
CVE-2016-8627
admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files There are no reported fixed by versions.
VCID-cqma-hqea-ekgj
Aliases:
CVE-2016-7061
EAP: Sensitive data can be exposed at the server level in domain mode There are no reported fixed by versions.
VCID-nbqb-aexa-dua8
Aliases:
CVE-2016-8656
jboss: jbossas: unsafe chown of server.log in jboss init script allows privilege escalation There are no reported fixed by versions.
VCID-rezs-n2jj-jbf6
Aliases:
CVE-2016-6816
GHSA-jc7p-5r39-9477
Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack and/or obtain sensitive information from requests other then their own. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-29T09:51:36.963887+00:00 RedHat Importer Affected by VCID-nbqb-aexa-dua8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8656.json 38.6.0
2026-05-29T09:49:56.163375+00:00 RedHat Importer Affected by VCID-cqma-hqea-ekgj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json 38.6.0
2026-05-29T09:49:42.198277+00:00 RedHat Importer Affected by VCID-rezs-n2jj-jbf6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6816.json 38.6.0
2026-05-29T09:49:03.664116+00:00 RedHat Importer Affected by VCID-91nw-m5n9-g7fn https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json 38.6.0