HighFix available
Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update
Type: advisorySources: OSV
- Products
- httpd24, httpd24-debuginfo, httpd24-devel, httpd24-manual, httpd24-tools, mod_ldap24, mod_proxy24_html, mod_security-jws3, mod_security-jws3-debuginfo, mod_session24, mod_ssl24, tomcat7, tomcat7-admin-webapps, tomcat7-docs-webapp, tomcat7-el-2.2-api, tomcat7-javadoc, tomcat7-jsp-2.2-api, tomcat7-lib, tomcat7-log4j, tomcat7-servlet-3.0-api, tomcat7-webapps, tomcat8, tomcat8-admin-webapps, tomcat8-docs-webapp, tomcat8-el-2.2-api, tomcat8-javadoc, tomcat8-jsp-2.3-api, tomcat8-lib, tomcat8-log4j, tomcat8-servlet-3.1-api, tomcat8-webapps
- Affected versions
- Not specified
- Fixed versions
- 0:2.4.6-61.ep7.el6, 0:2.8.0-7.GA.ep7.el6, 0:7.0.59-50_patch_01.ep7.el6, 0:8.0.18-61_patch_01.ep7.el6, 1:2.4.6-61.ep7.el6
- CVEs
- CVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0763
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 17:25 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update
core-osv · Original sourcePublished 15 Sept 2024, 23:05 UTC
Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update
osv:RHSA-2016:1087
httpd24
Fixed versions: 0:2.4.6-61.ep7.el6
httpd24-debuginfo
Fixed versions: 0:2.4.6-61.ep7.el6
httpd24-devel
Fixed versions: 0:2.4.6-61.ep7.el6
httpd24-manual
Fixed versions: 0:2.4.6-61.ep7.el6
httpd24-tools
Fixed versions: 0:2.4.6-61.ep7.el6
mod_ldap24
Fixed versions: 0:2.4.6-61.ep7.el6
mod_proxy24_html
Fixed versions: 1:2.4.6-61.ep7.el6
mod_security-jws3
Fixed versions: 0:2.8.0-7.GA.ep7.el6
mod_security-jws3-debuginfo
Fixed versions: 0:2.8.0-7.GA.ep7.el6
mod_session24
Fixed versions: 0:2.4.6-61.ep7.el6
mod_ssl24
Fixed versions: 1:2.4.6-61.ep7.el6
tomcat7
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-admin-webapps
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-docs-webapp
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-el-2.2-api
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-javadoc
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-jsp-2.2-api
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-lib
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-log4j
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-servlet-3.0-api
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat7-webapps
Fixed versions: 0:7.0.59-50_patch_01.ep7.el6
tomcat8
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-admin-webapps
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-docs-webapp
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-el-2.2-api
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-javadoc
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-jsp-2.3-api
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-lib
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-log4j
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-servlet-3.1-api
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
tomcat8-webapps
Fixed versions: 0:8.0.18-61_patch_01.ep7.el6
Complete source record
{
"id": "02ae7ef724f17f3f49d0724162693eb837f3382e9036d2f4741e9cd092423ad0",
"url": "https://osv.dev/vulnerability/RHSA-2016%3A1087",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update",
"summary": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.3 update",
"evidence": "osv:RHSA-2016:1087",
"products": [
{
"name": {
"value": "httpd24",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "httpd24-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "httpd24-devel",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "httpd24-manual",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "httpd24-tools",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_ldap24",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_proxy24_html",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2.4.6-61.ep7.el6",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_security-jws3",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.8.0-7.GA.ep7.el6",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_security-jws3-debuginfo",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.8.0-7.GA.ep7.el6",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_session24",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.4.6-61.ep7.el6",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mod_ssl24",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1:2.4.6-61.ep7.el6",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-admin-webapps",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-docs-webapp",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-el-2.2-api",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-javadoc",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-jsp-2.2-api",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-lib",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-log4j",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-servlet-3.0-api",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat7-webapps",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:7.0.59-50_patch_01.ep7.el6",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-admin-webapps",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-docs-webapp",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-el-2.2-api",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-javadoc",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-jsp-2.3-api",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-lib",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-log4j",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-servlet-3.1-api",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "tomcat8-webapps",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:8.0.18-61_patch_01.ep7.el6",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2016:1087",
"aliases": [
"RHSA-2016:1087"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "httpd24",
"purl": "pkg:rpm/redhat/httpd24",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "httpd24-debuginfo",
"purl": "pkg:rpm/redhat/httpd24-debuginfo",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "httpd24-devel",
"purl": "pkg:rpm/redhat/httpd24-devel",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "httpd24-manual",
"purl": "pkg:rpm/redhat/httpd24-manual",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "httpd24-tools",
"purl": "pkg:rpm/redhat/httpd24-tools",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "mod_ldap24",
"purl": "pkg:rpm/redhat/mod_ldap24",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "mod_proxy24_html",
"purl": "pkg:rpm/redhat/mod_proxy24_html",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.8.0-7.GA.ep7.el6"
}
]
}
],
"package": {
"name": "mod_security-jws3",
"purl": "pkg:rpm/redhat/mod_security-jws3",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.8.0-7.GA.ep7.el6"
}
]
}
],
"package": {
"name": "mod_security-jws3-debuginfo",
"purl": "pkg:rpm/redhat/mod_security-jws3-debuginfo",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "mod_session24",
"purl": "pkg:rpm/redhat/mod_session24",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1:2.4.6-61.ep7.el6"
}
]
}
],
"package": {
"name": "mod_ssl24",
"purl": "pkg:rpm/redhat/mod_ssl24",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7",
"purl": "pkg:rpm/redhat/tomcat7",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-admin-webapps",
"purl": "pkg:rpm/redhat/tomcat7-admin-webapps",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-docs-webapp",
"purl": "pkg:rpm/redhat/tomcat7-docs-webapp",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-el-2.2-api",
"purl": "pkg:rpm/redhat/tomcat7-el-2.2-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-javadoc",
"purl": "pkg:rpm/redhat/tomcat7-javadoc",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-jsp-2.2-api",
"purl": "pkg:rpm/redhat/tomcat7-jsp-2.2-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-lib",
"purl": "pkg:rpm/redhat/tomcat7-lib",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-log4j",
"purl": "pkg:rpm/redhat/tomcat7-log4j",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-servlet-3.0-api",
"purl": "pkg:rpm/redhat/tomcat7-servlet-3.0-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:7.0.59-50_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat7-webapps",
"purl": "pkg:rpm/redhat/tomcat7-webapps",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8",
"purl": "pkg:rpm/redhat/tomcat8",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-admin-webapps",
"purl": "pkg:rpm/redhat/tomcat8-admin-webapps",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-docs-webapp",
"purl": "pkg:rpm/redhat/tomcat8-docs-webapp",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-el-2.2-api",
"purl": "pkg:rpm/redhat/tomcat8-el-2.2-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-javadoc",
"purl": "pkg:rpm/redhat/tomcat8-javadoc",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-jsp-2.3-api",
"purl": "pkg:rpm/redhat/tomcat8-jsp-2.3-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-lib",
"purl": "pkg:rpm/redhat/tomcat8-lib",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-log4j",
"purl": "pkg:rpm/redhat/tomcat8-log4j",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-servlet-3.1-api",
"purl": "pkg:rpm/redhat/tomcat8-servlet-3.1-api",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:8.0.18-61_patch_01.ep7.el6"
}
]
}
],
"package": {
"name": "tomcat8-webapps",
"purl": "pkg:rpm/redhat/tomcat8-webapps",
"ecosystem": "Red Hat:jboss_enterprise_web_server:3.0::el6"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2016:1087.json"
}
}
],
"modified": "2026-10-15T10:01:23Z",
"provider": "osv",
"upstream": [
"CVE-2015-5345",
"CVE-2015-5346",
"CVE-2015-5351",
"CVE-2016-0706",
"CVE-2016-0714",
"CVE-2016-0763"
],
"references": [
"https://access.redhat.com/errata/RHSA-2016:1087",
"https://access.redhat.com/security/updates/classification/#moderate",
"https://access.redhat.com/documentation/en-US/Red_Hat_JBoss_Web_Server/3/html-single/3.0.3_Release_Notes/index.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311076",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311082",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311085",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311087",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311089",
"https://bugzilla.redhat.com/show_bug.cgi?id=1311093",
"https://issues.redhat.com/browse/JWS-271",
"https://issues.redhat.com/browse/JWS-272",
"https://issues.redhat.com/browse/JWS-276",
"https://issues.redhat.com/browse/JWS-277",
"https://issues.redhat.com/browse/JWS-303",
"https://issues.redhat.com/browse/JWS-304",
"https://issues.redhat.com/browse/JWS-309",
"https://issues.redhat.com/browse/JWS-349",
"https://issues.redhat.com/browse/JWS-350",
"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1087.json",
"https://access.redhat.com/security/cve/CVE-2015-5345",
"https://www.cve.org/CVERecord?id=CVE-2015-5345",
"https://nvd.nist.gov/vuln/detail/CVE-2015-5345",
"https://access.redhat.com/security/cve/CVE-2015-5346",
"https://www.cve.org/CVERecord?id=CVE-2015-5346",
"https://nvd.nist.gov/vuln/detail/CVE-2015-5346",
"https://access.redhat.com/security/cve/CVE-2015-5351",
"https://www.cve.org/CVERecord?id=CVE-2015-5351",
"https://nvd.nist.gov/vuln/detail/CVE-2015-5351",
"https://access.redhat.com/security/cve/CVE-2016-0706",
"https://www.cve.org/CVERecord?id=CVE-2016-0706",
"https://nvd.nist.gov/vuln/detail/CVE-2016-0706",
"https://access.redhat.com/security/cve/CVE-2016-0714",
"https://www.cve.org/CVERecord?id=CVE-2016-0714",
"https://nvd.nist.gov/vuln/detail/CVE-2016-0714",
"https://access.redhat.com/security/cve/CVE-2016-0763",
"https://www.cve.org/CVERecord?id=CVE-2016-0763",
"https://nvd.nist.gov/vuln/detail/CVE-2016-0763"
]
},
"related_cves": [
{
"value": "CVE-2015-5345",
"evidence": "/upstream"
},
{
"value": "CVE-2015-5346",
"evidence": "/upstream"
},
{
"value": "CVE-2015-5351",
"evidence": "/upstream"
},
{
"value": "CVE-2016-0706",
"evidence": "/upstream"
},
{
"value": "CVE-2016-0714",
"evidence": "/upstream"
},
{
"value": "CVE-2016-0763",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 330334,
"published_at": "2024-09-15T23:05:31+00:00"
}