01 Record
CVE-2019-10086
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all
UnratedPUBLISHEDCNA: apache
CNA base scoreUnratedNo CNA CVSS vector
02 Description
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all
03 Exploitation and scoring
- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
- Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
- EPSS probability
- 29.08% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 98.1% of scored records. A rank, not a probability.
- NVD base score
- 7.3 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- NVD analysis status
- Modified. NVD last modified this record on 2026-10-08.
- Red Hat severity
- Important. Red Hat's rating for its own products, not a CVSS rating.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2019-08-20 20:10Z7 YR AGO
- Last updated
- 2026-10-08 21:13Z20 DAYS AGO
- Reserved
- 2019-03-26
- Assigning CNA
- apache
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-502Deserialization of Untrusted DataBase
- Data version
- 5.2
- Document digest
- e6411a2731916e01b67f5ed2900d5ea6a7bcbdf3303cdce97ba54eeaf9f631f4
05 Affected products
VendorProductVersionsPlatforms
06 References
- mail-archives.apache.org[www-announce] 20190815 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.http://mail-archives.apache.org/mod_mbox/www-announce/201908.mbox/%3cC628798F-315D-4428-8CB1-4ED1ECC958E4%40apache.org%3e
- lists.debian.org[debian-lts-announce] 20190824 [SECURITY] [DLA 1896-1] commons-beanutils security updatehttps://lists.debian.org/debian-lts-announce/2019/08/msg00030.html
- lists.apache.org[tinkerpop-commits] 20190829 [tinkerpop] branch master updated: Bump commons-beanutils to 1.9.4 for CVE-2019-10086 - CTRhttps://lists.apache.org/thread.html/3d1ed1a1596c08c4d5fea97b36c651ce167b773f1afc75251ce7a125%40%3Ccommits.tinkerpop.apache.org%3E
- lists.opensuse.orgopenSUSE-SU-2019:2058http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00007.html
- lists.apache.org[commons-issues] 20190906 [jira] [Updated] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E
- lists.apache.org[commons-issues] 20190906 [jira] [Closed] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E
- lists.apache.org[commons-issues] 20190925 [GitHub] [commons-validator] jeff-schram opened a new pull request #18: Update pom.xmlhttps://lists.apache.org/thread.html/02094ad226dbc17a2368beaf27e61d8b1432f5baf77d0ca995bb78bc%40%3Cissues.commons.apache.org%3E
- lists.apache.org[shiro-dev] 20191001 [jira] [Updated] (SHIRO-723) Provide Minor Shiro Release that includes CVE-2019-10086 Fixhttps://lists.apache.org/thread.html/d6ca9439c53374b597f33b7ec180001625597db48ea30356af01145f%40%3Cdev.shiro.apache.org%3E
- lists.apache.org[shiro-dev] 20191001 [jira] [Created] (SHIRO-723) Provide Minor Shiro Release that includes CVE-2019-10086 Fiixhttps://lists.apache.org/thread.html/2fd61dc89df9aeab738d2b49f48d42c76f7d53b980ba04e1d48bce48%40%3Cdev.shiro.apache.org%3E
- lists.apache.org[shiro-dev] 20191001 [jira] [Commented] (SHIRO-723) Provide Minor Shiro Release that includes CVE-2019-10086 Fixhttps://lists.apache.org/thread.html/c94bc9649d5109a663b2129371dc45753fbdeacd340105548bbe93c3%40%3Cdev.shiro.apache.org%3E
- lists.apache.org[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilitieshttps://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
- lists.apache.org[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitieshttps://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
- lists.apache.org[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitieshttps://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
- lists.apache.org[shiro-dev] 20191023 [jira] [Assigned] (SHIRO-723) Provide Minor Shiro Release that includes CVE-2019-10086 Fixhttps://lists.apache.org/thread.html/5261066cd7adee081ee05c8bf0e96cf0b2eeaced391e19117ae4daa6%40%3Cdev.shiro.apache.org%3E
- lists.apache.org[shiro-dev] 20191105 [jira] [Resolved] (SHIRO-723) Provide Minor Shiro Release that includes CVE-2019-10086 Fixhttps://lists.apache.org/thread.html/a684107d3a78e431cf0fbb90629e8559a36ff8fe94c3a76e620b39fa%40%3Cdev.shiro.apache.org%3E
- lists.fedoraproject.orgFEDORA-2019-bcad44b5d6https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APPGLBWMFAS4WHNLR4LIJ65DJGPV7TF/
- lists.fedoraproject.orgFEDORA-2019-79b5790566https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIUYSL2RSIWZVNSUIXJTIFPIPIF6OAIO/
- access.redhat.comRHSA-2019:4317https://access.redhat.com/errata/RHSA-2019:4317
- access.redhat.comRHSA-2020:0057https://access.redhat.com/errata/RHSA-2020:0057
- access.redhat.comRHSA-2020:0194https://access.redhat.com/errata/RHSA-2020:0194
- access.redhat.comRHSA-2020:0806https://access.redhat.com/errata/RHSA-2020:0806
- access.redhat.comRHSA-2020:0811https://access.redhat.com/errata/RHSA-2020:0811
- access.redhat.comRHSA-2020:0804https://access.redhat.com/errata/RHSA-2020:0804
- access.redhat.comRHSA-2020:0805https://access.redhat.com/errata/RHSA-2020:0805
- lists.apache.org[brooklyn-dev] 20200420 [GitHub] [brooklyn-server] duncangrant opened a new pull request #1091: Update library versions due to CVEshttps://lists.apache.org/thread.html/r967953a14e05016bc4bcae9ef3dd92e770181158b4246976ed8295c9%40%3Cdev.brooklyn.apache.org%3E
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2020.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2020.html
- lists.apache.org[atlas-dev] 20201022 [jira] [Created] (ATLAS-4002) Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/rae81e0c8ebdf47ffaa85a01240836bfece8a990c48f55c7933162b5c%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201022 Re: Review Request 72983: ATLAS-4002 : Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/reee57101464cf7622d640ae013b2162eb864f603ec4093de8240bb8f%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201023 Re: Review Request 72983: ATLAS-4002 : Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/r18d8b4f9263e5cad3bbaef0cdba0e2ccdf9201316ac4b85e23eb7ee4%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201023 [jira] [Updated] (ATLAS-4002) Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/ra87ac17410a62e813cba901fdd4e9a674dd53daaf714870f28e905f1%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-commits] 20201023 [atlas] 01/05: ATLAS-4002 : Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/rb8dac04cb7e9cc5dedee8dabaa1c92614f590642e5ebf02a145915ba%40%3Ccommits.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201023 [jira] [Commented] (ATLAS-4002) Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/r6194ced4828deb32023cd314e31f41c61d388b58935d102c7de91f58%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201026 [jira] [Updated] (ATLAS-4002) Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/r306c0322aa5c0da731e03f3ce9f07f4745c052c6b73f4e78faf232ca%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[atlas-dev] 20201023 [jira] [Commented] (ATLAS-4002) Upgrade commons-beanutils to 1.9.4 due to CVE-2019-10086https://lists.apache.org/thread.html/racd3e7b2149fa2f255f016bd6bffab0fea77b6fb81c50db9a17f78e6%40%3Cdev.atlas.apache.org%3E
- lists.apache.org[rocketmq-dev] 20201223 [GitHub] [rocketmq] crazywen opened a new pull request #2515: Update pom.xmlhttps://lists.apache.org/thread.html/r43de02fd4a4f52c4bdeff8c02f09625d83cd047498009c1cdab857db%40%3Cdev.rocketmq.apache.org%3E
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2021.html
- lists.apache.org[dolphinscheduler-commits] 20210121 [GitHub] [incubator-dolphinscheduler] lgcareer commented on pull request #4525: [Improvement-4506][LICENSE] upgrade the version of the commons-beanutilshttps://lists.apache.org/thread.html/r513a7a21c422170318115463b399dd58ab447fe0990b13e5884f0825%40%3Ccommits.dolphinscheduler.apache.org%3E
- lists.apache.org[dolphinscheduler-commits] 20210121 [GitHub] [incubator-dolphinscheduler] c-f-cooper commented on pull request #4525: [Improvement-4506][LICENSE] upgrade the version of the commons-beanutilshttps://lists.apache.org/thread.html/ra9a139fdc0999750dcd519e81384bc1fe3946f311b1796221205f51c%40%3Ccommits.dolphinscheduler.apache.org%3E
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuApr2021.html
- www.oracle.comhttps://www.oracle.com//security-alerts/cpujul2021.html
- lists.apache.org[nifi-issues] 20210827 [jira] [Updated] (NIFI-9170) Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/rcc029be4edaaf5b8bb85818aab494e16f312fced07a0f4a202771ba2%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210827 [GitHub] [nifi] naddym opened a new pull request #5351: NIFI-9170 Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/r46e536fc98942dce99fadd2e313aeefe90c1a769c5cd85d98df9d098%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210827 [jira] [Created] (NIFI-9170) Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/rec74f3a94dd850259c730b4ba6f7b6211222b58900ec088754aa0534%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210907 [GitHub] [nifi] MikeThomsen commented on pull request #5351: NIFI-9170 Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/r2d5f1d88c39bd615271abda63964a0bee9b2b57fef1f84cb4c43032e%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-commits] 20210907 [nifi] branch main updated: NIFI-9170 Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086 NIFI-9170 Add two more 1.9.4 references to close out the few things identified by the Maven dependency plugin.https://lists.apache.org/thread.html/re2028d4d76ba1db3e3c3a722d6c6034e801cc3b309f69cc166eaa32b%40%3Ccommits.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210907 [GitHub] [nifi] asfgit closed pull request #5351: NIFI-9170 Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/ra41fd0ad4b7e1d675c03a5081a16a6603085a4e37d30b866067566fe%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210907 [jira] [Commented] (NIFI-9170) Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/re3cd7cb641d7fc6684e4fc3c336a8bad4a01434bb5625a06e3600fd1%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210908 [GitHub] [nifi] naddym commented on pull request #5351: NIFI-9170 Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/rd2d2493f4f1af6980d265b8d84c857e2b7ab80a46e1423710c448957%40%3Cissues.nifi.apache.org%3E
- lists.apache.org[nifi-issues] 20210915 [jira] [Updated] (NIFI-9170) Upgrade commons-beanutils to 1.9.4 to mitigate CVE-2019-10086https://lists.apache.org/thread.html/rb1f76c2c0a4d6efb8a3523974f9d085d5838b73e7bffdf9a8f212997%40%3Cissues.nifi.apache.org%3E
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuoct2021.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujan2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpuapr2022.html
- www.oracle.comhttps://www.oracle.com/security-alerts/cpujul2022.html
07 Fixed in
AlmaLinux 8
- ant Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-antlr Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-bcel Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-bsf Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-log4j Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-oro Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-regexp Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-resolver Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-xalan2 Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-commons-logging Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-commons-net Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-contrib Fixed in 1.0-0.32.b3.module_el8.0.0+6004+2fc32706
- ant-contrib-javadoc Fixed in 1.0-0.32.b3.module_el8.0.0+6004+2fc32706
- ant-javadoc Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-javamail Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jdepend Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jmf Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jsch Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-junit Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-lib Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-manual Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-swing Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-testutil Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-xz Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- antlr-C++ Fixed
A version is affected if any line below covers it.
- Affected before 2.7.7-56.module_el8.0.0+6004+2fc32706
- Affected before 2.7.7-56.module_el8.5.0+197+0c7f4e0a
- Affected before 2.7.7-56.module_el8.6.0+3182+f8468cf8
- antlr-javadoc Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- antlr-manual Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- antlr-tool Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- aopalliance Fixed in 1.0-17.module_el8.0.0+6004+2fc32706
- aopalliance-javadoc Fixed in 1.0-17.module_el8.0.0+6004+2fc32706
- apache-commons-beanutils Fixed in 1.9.3-5.module_el8.10.0+4020+7deec6e4
- apache-commons-beanutils-javadoc Fixed in 1.9.3-5.module_el8.10.0+4020+7deec6e4
- apache-commons-cli Fixed in 1.4-4.module_el8.0.0+6004+2fc32706
- apache-commons-cli-javadoc Fixed in 1.4-4.module_el8.0.0+6004+2fc32706
- apache-commons-codec Fixed in 1.11-3.module_el8.0.0+6004+2fc32706
- apache-commons-codec-javadoc Fixed in 1.11-3.module_el8.0.0+6004+2fc32706
- apache-commons-collections Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-collections-javadoc Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-collections-testframework Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-compress Fixed in 1.18-1.module_el8.0.0+6004+2fc32706
470 further packages in AlmaLinux 8 not shown (first 40 listed).
Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.
CloudLinux 8
- ant Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-antlr Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-bcel Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-bsf Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-log4j Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-oro Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-regexp Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-resolver Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-apache-xalan2 Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-commons-logging Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-commons-net Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-contrib Fixed in 1.0-0.32.b3.module_el8.0.0+6004+2fc32706
- ant-contrib-javadoc Fixed in 1.0-0.32.b3.module_el8.0.0+6004+2fc32706
- ant-javadoc Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-javamail Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jdepend Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jmf Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-jsch Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-junit Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-lib Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-manual Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-swing Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-testutil Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- ant-xz Fixed in 1.10.5-1.module_el8.0.0+6004+2fc32706
- antlr-C++ Fixed
A version is affected if any line below covers it.
- Affected before 2.7.7-56.module_el8.0.0+6004+2fc32706
- Affected before 2.7.7-56.module_el8.5.0+197+0c7f4e0a
- Affected before 2.7.7-56.module_el8.6.0+3182+f8468cf8
- antlr-javadoc Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- antlr-manual Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- antlr-tool Fixed in 2.7.7-56.module_el8.0.0+6004+2fc32706
- aopalliance Fixed in 1.0-17.module_el8.0.0+6004+2fc32706
- aopalliance-javadoc Fixed in 1.0-17.module_el8.0.0+6004+2fc32706
- apache-commons-beanutils Fixed in 1.9.3-5.module_el8.10.0+4020+7deec6e4
- apache-commons-beanutils-javadoc Fixed in 1.9.3-5.module_el8.10.0+4020+7deec6e4
- apache-commons-cli Fixed in 1.4-4.module_el8.0.0+6004+2fc32706
- apache-commons-cli-javadoc Fixed in 1.4-4.module_el8.0.0+6004+2fc32706
- apache-commons-codec Fixed in 1.11-3.module_el8.0.0+6004+2fc32706
- apache-commons-codec-javadoc Fixed in 1.11-3.module_el8.0.0+6004+2fc32706
- apache-commons-collections Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-collections-javadoc Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-collections-testframework Fixed in 3.2.2-10.module_el8.0.0+6004+2fc32706
- apache-commons-compress Fixed in 1.18-1.module_el8.0.0+6004+2fc32706
470 further packages in CloudLinux 8 not shown (first 40 listed).
Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.
Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.
Debian 12
- commons-beanutils Fixed in 1.9.4-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- commons-beanutils Fixed in 1.9.4-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 14
- commons-beanutils Fixed in 1.9.4-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu Pro 14.04 LTS
- commons-beanutils Fixed in 1.9.1-1ubuntu0.1~esm1Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu Pro 16.04 LTS
- commons-beanutils Fixed in 1.9.2-3ubuntu0.1~esm1Available with Ubuntu Pro: https://ubuntu.com/pro
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
Ubuntu Pro 18.04 LTS
- commons-beanutils Fixed in 1.9.3-1ubuntu0.1~esm1Available with Ubuntu Pro: https://ubuntu.com/pro
Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.