GCVE - cpe:2.3:a:redhat:resteasy:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:resteasy:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Redhat (`e942785a-ca89-506e-bd99-50782639cde3`)
Product	Resteasy (`aa77f1d5-803b-5be3-b674-755516aaaf4d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/resteasy3.0`	purl2cpe	2026-06-01 10:12:57.098517
`pkg:deb/ubuntu/resteasy`	purl2cpe	2026-06-01 10:12:57.098518
`pkg:deb/ubuntu/resteasy3.0`	purl2cpe	2026-06-01 10:12:57.098520
`pkg:github/resteasy/resteasy`	purl2cpe	2026-06-01 10:12:57.098521
`pkg:rpm/fedora/resteasy`	purl2cpe	2026-06-01 10:12:57.098522
`pkg:rpm/opensuse/resteasy`	purl2cpe	2026-06-01 10:12:57.098524
`pkg:sourceforge/resteasy`	purl2cpe	2026-06-01 10:12:57.098525

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6348`	vulnerable	2026-06-08 05:07:59.660513	Details available JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. Published: 2017-04-12T22:00:00.000Z Updated: 2024-08-06T01:29:19.534Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1372129	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6347`	vulnerable	2026-06-08 05:07:59.660243	Details available Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2017-04-20T17:00:00.000Z Updated: 2024-08-06T01:29:19.290Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/92759 https://bugzilla.redhat.com/show_bug.cgi?id=1372124	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6346`	vulnerable	2026-06-08 05:07:59.659932	Details available RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. Published: 2016-09-07T18:00:00.000Z Updated: 2024-08-06T01:29:19.579Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2017-0828.html http://rhn.redhat.com/errata/RHSA-2017-0827.html https://access.redhat.com/errata/RHSA-2018:2143 https://access.redhat.com/errata/RHSA-2017:1675 https://access.redhat.com/errata/RHSA-2018:0002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6345`	vulnerable	2026-06-08 05:07:59.659419	Details available RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. Published: 2016-09-07T18:00:00.000Z Updated: 2024-08-06T01:29:19.490Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1372117 http://www.securityfocus.com/bid/92746	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.