Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP03.0jpp.ep1.1.el5?arch=1
purl pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP03.0jpp.ep1.1.el5?arch=1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6h78-yqz1-xkbw
Aliases:
CVE-2008-3519
JBossEAP allows download of non-EJB class files There are no reported fixed by versions.
VCID-hhkg-mfp5-2kax
Aliases:
CVE-2007-5342
GHSA-w65j-cmqc-37p2
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:59:20.850762+00:00 RedHat Importer Affected by VCID-hhkg-mfp5-2kax https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5342.json 38.0.0
2026-04-01T14:58:49.241471+00:00 RedHat Importer Affected by VCID-6h78-yqz1-xkbw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-3519.json 38.0.0