{"id":"CVE-2026-15556","revision":"3c0541545f1348a29499716c89afc4cb","records":[{"revision":"3c0541545f1348a29499716c89afc4cb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-15556","aliases":[],"title":"Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions","description":"A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protected application.","state":0,"publishedAt":"2026-08-11T08:49:44.388+00:00","modifiedAt":"2026-10-20T19:19:44.657+00:00","affected":[{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4.25\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"defaultStatus\": \"unaffected\",\n \"packageName\": \"picketlink-federation\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:7.4\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-activemq-artemis","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-activemq-artemis\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.16.0-22.redhat_00057.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-glassfish-jsf","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-glassfish-jsf\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.3.14-11.SP11_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-ironjacamar","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-ironjacamar\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.5.26-2.Final_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-annotations","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-annotations\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-core","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-core\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-databind","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-databind\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-jaxrs-providers","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-jaxrs-providers\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-base","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-base\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-java8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-java8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-remoting","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-remoting\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:5.0.31-3.SP2_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-server-migration","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-server-migration\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.10.0-46.Final_redhat_00044.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty-transport-native-epoll","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty-transport-native-epoll\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-bindings","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-bindings\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-30.SP12_redhat_00020.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-federation\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-24.SP12_redhat_00016.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-undertow","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-undertow\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.2.40-2.SP3_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-wildfly","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-wildfly\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:7.4.25-2.GA_redhat_00001.1.el7eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el7\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-activemq-artemis","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-activemq-artemis\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.16.0-22.redhat_00057.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-glassfish-jsf","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-glassfish-jsf\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.3.14-11.SP11_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-ironjacamar","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-ironjacamar\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.5.26-2.Final_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-annotations","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-annotations\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-core","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-core\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-databind","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-databind\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-jaxrs-providers","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-jaxrs-providers\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-base","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-base\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-java8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-java8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-remoting","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-remoting\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:5.0.31-3.SP2_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-server-migration","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-server-migration\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.10.0-46.Final_redhat_00044.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty-transport-native-epoll","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty-transport-native-epoll\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-bindings","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-bindings\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-30.SP12_redhat_00020.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-federation\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-24.SP12_redhat_00016.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-undertow","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-undertow\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.2.40-1.SP3_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-wildfly","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-wildfly\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:7.4.25-2.GA_redhat_00001.1.el8eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-activemq-artemis","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-activemq-artemis\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.16.0-22.redhat_00057.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-glassfish-jsf","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-glassfish-jsf\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.3.14-11.SP11_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-ironjacamar","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-ironjacamar\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.5.26-2.Final_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-annotations","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-annotations\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-core","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-core\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-databind","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-databind\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-jaxrs-providers","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-jaxrs-providers\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-base","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-base\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jackson-modules-java8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jackson-modules-java8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.18.8-1.redhat_00003.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-remoting","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-remoting\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:5.0.31-3.SP2_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-jboss-server-migration","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-jboss-server-migration\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:1.10.0-46.Final_redhat_00044.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-netty-transport-native-epoll","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-netty-transport-native-epoll\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:4.1.135-1.Final_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-bindings","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-bindings\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-30.SP12_redhat_00020.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-picketlink-federation\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.5.5-24.SP12_redhat_00016.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-undertow","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-undertow\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:2.2.40-1.SP3_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"eap7-wildfly","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9\",\n \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n \"packageName\": \"eap7-wildfly\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"0:7.4.25-2.GA_redhat_00001.1.el9eap\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform_els:7.4::el9\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform 8\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"picketlink-federation\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jboss_enterprise_application_platform:8\"\n ]\n }"},{"ecosystem":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","name":"picketlink-federation","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat JBoss Enterprise Application Platform Expansion Pack\",\n \"collectionURL\": \"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html\",\n \"packageName\": \"picketlink-federation\",\n \"defaultStatus\": \"unaffected\",\n \"cpes\": [\n \"cpe:/a:redhat:jbosseapxp\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","score":8.1,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2026:53644","https://access.redhat.com/errata/RHSA-2026:53645","https://access.redhat.com/errata/RHSA-2026:53646","https://access.redhat.com/errata/RHSA-2026:53806","https://access.redhat.com/security/cve/CVE-2026-15556","https://bugzilla.redhat.com/show_bug.cgi?id=2483121"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-15556","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-15556","identifiers":["CVE-2026-15556"]},"retained":false,"historicalAffected":[]}],"coverage":[]}