Improper access control in Apache Commons BeanUtils - CVE-2025-48734

Vulnerability identifier: #VU111165

CSH Severity: Medium

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-48734

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions to enum properties. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().

Apache Commons BeanUtils
OpenShift Developer Tools and Services
Oracle Agile PLM Framework
Oracle JDeveloper
Red Hat Camel for Spring Boot
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
Oracle Solaris Cluster
SUSE Manager Server
SUSE Enterprise Storage
Anolis OS
Ubuntu
Web and Scripting Module
openSUSE Leap
openEuler
Fedora
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Netcool Operations Insight
IBM SPSS Analytic Server
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
Jira Service Management Data Center
IBM Sterling B2B Integrator
IBM Sterling Secure Proxy
IBM Sterling External Authentication Server
IBM Tivoli Business Service Manager
IBM Sterling Partner Engagement Manager
IBM Sterling Control Center
IBM Tivoli Netcool Impact
Crowd Data Center
IBM Spectrum Symphony
Oracle Communications Network Integrity
Oracle Communications Unified Inventory Management
IBM Rational Build Forge
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
Oracle Financial Services Behavior Detection Platform
IBM Tivoli Netcool/OMNIbus WebGUI
Oracle Financial Services Model Management and Governance
IBM Cloud Application Performance Management (APM)
IBM SPSS Collaboration and Deployment Services
Confluence Data Center
Bitbucket Data Center
IBM Common Licensing
Bamboo Server
Jira Software Data Center
IBM Transformation Extender Advanced
Infrastructure Technology
Oracle Middleware Common Libraries and Tools
Oracle Rapid Planning
Primavera P6 Enterprise Project Portfolio Management
IBM Business Automation Workflow
Oracle Communications Cloud Native Core Network Exposure Function
Oracle Communications Cloud Native Core Binding Support Function
Financial Transaction Manager for ACH Services and Check Services
App Connect Enterprise Certified Container
IBM Cloud Pak for Business Automation
IBM Disconnected Log Collector
JD Edwards EnterpriseOne Tools
Primavera Unifier
Oracle Insurance Policy Administration Operational Data Store for Life and Annuity
Oracle Utilities Application Framework
Oracle Communications Element Manager
Oracle Insurance Policy Administration
Oracle iProcurement
Oracle Succession planning
Oracle Field Service
Oracle Banking Corporate Lending Process Management
Oracle Banking Liquidity Management
Oracle Banking Cash Management
Oracle Banking Origination
Oracle Retail Price Management
DataPower Operations Dashboard
Library Support for Struts
Cloudera Observability with IBM
Guardium Data Security Center (GDSC)
Oracle Healthcare Master Person Index
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component
DataStage on Cloud Pak for Data
Oracle Business Intelligence Enterprise Edition
Oracle Financial Services Analytical Applications Infrastructure
IBM Engineering Requirements Management DOORS Next
Rational Developer for i
Oracle Data Integrator
Oracle Advanced Supply Chain Planning
Oracle Application Testing Suite
Oracle Retail Service Backbone
Oracle Communications Policy Management
Oracle Retail Xstore Point of Service
Storage Copy Data Management
IBM Engineering Lifecycle Optimization - Publishing
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect for Space Management
Db2 Big SQL
Storage Protect for Virtual Environments: Data Protection for VMware
Storage Protect Client
Guardium Data Protection
IBM Cloud Pak System
Oracle Communications Convergence
Communications Unified Assurance
Oracle Communications MetaSolv Solution
IBM Sterling File Gateway
Jazz Reporting Service
IBM Qradar SIEM
Event Streams
Oracle Hyperion Calculation Manager
Crowd Server
Oracle Communications Order and Service Management
RSA Authentication Manager
Juniper Secure Analytics (JSA)
Confluence Server
Bitbucket Server
Oracle WebLogic Server
Oracle Retail Predictive Application Server
AMQ Streams
AMQ Broker
PeopleSoft Enterprise PeopleTools
Oracle Documaker
Hyperion Planning
Oracle WebCenter Portal
Oracle Flow Manufacturing
Oracle Human Resources
Oracle Hospitality Cruise Shipboard Property Management System
Oracle Commerce Guided Search
Oracle Time and Labor
Oracle Retail Fiscal Management
Oracle Retail Allocation
Oracle Retail Advanced Inventory Planning
Oracle Retail Invoice Matching
IBM InfoSphere Information Server
Oracle Communications BRM - Elastic Charging Engine
Identity Manager
Oracle Service Bus
Oracle Global Order Promising
Oracle Yard Management
Oracle Retail Integration Bus
Oracle Communications Cloud Native Core Service Communication Proxy
Oracle Communications Cloud Native Core Network Slice Selection Function
Oracle Communications Cloud Native Core Console
plexus-build-api
plexus-build-api-javadoc
jsr-305
jsr-305-javadoc
isorelax
isorelax-javadoc
jsch
jsch-javadoc
sisu-mojos-javadoc
sisu-mojos
sisu-javadoc
sisu-plexus
sisu-inject
cal10n-javadoc
cal10n
maven-cal10n-plugin
maven-artifact-transfer-javadoc
maven-artifact-transfer
plexus-languages
plexus-languages-javadoc
java_cup
java_cup-javadoc
java_cup-manual
jboss-interceptors-1.2-api-javadoc
jboss-interceptors-1.2-api
plexus-i18n-javadoc
plexus-i18n
plexus-component-factories-pom
plexus-bsh-factory
plexus-bsh-factory-javadoc
plexus-ant-factory
plexus-ant-factory-javadoc
plexus-resources-javadoc
plexus-resources
plexus-component-api
plexus-component-api-javadoc
plexus-interactivity-javadoc
plexus-interactivity-api
plexus-interactivity
plexus-interactivity-jline
jtidy-javadoc
jtidy
ant-contrib-javadoc
ant-contrib
munge-maven-plugin-javadoc
munge-maven-plugin
aopalliance
aopalliance-javadoc
maven-artifact-resolver
maven-artifact-resolver-javadoc
geronimo-annotation-javadoc
geronimo-annotation
maven-resolver-javadoc
maven-resolver-spi
maven-resolver-test-util
maven-resolver-transport-classpath
maven-resolver-transport-wagon
maven-resolver-util
maven-resolver-connector-basic
maven-resolver-api
maven-resolver-transport-file
maven-resolver-transport-http
maven-resolver
maven-resolver-impl
geronimo-jpa-javadoc
geronimo-jpa
geronimo-jms
geronimo-jms-javadoc
jzlib-demo
jzlib
jzlib-javadoc
jdom-javadoc
jdom-demo
jdom
jaxen
jaxen-demo
jaxen-javadoc
maven-script-interpreter-javadoc
glassfish-legal
maven-script-interpreter
maven-shared-incremental-javadoc
maven-shared-incremental
felix-osgi-foundation-javadoc
felix-osgi-foundation
jdependency-javadoc
jdependency
os-maven-plugin
os-maven-plugin-javadoc
plexus-velocity
plexus-velocity-javadoc
cdi-api-javadoc
cdi-api
spec-version-maven-plugin-javadoc
spec-version-maven-plugin
apache-commons-logging-javadoc
glassfish-annotation-api
glassfish-annotation-api-javadoc
apache-commons-logging
log4j12
log4j12-javadoc
xml-commons-resolver-javadoc
xml-commons-resolver
plexus-components-pom
apache-commons-exec
apache-commons-exec-javadoc
hamcrest
hamcrest-core
hamcrest-demo
hamcrest-javadoc
apache-commons-jxpath-javadoc
apache-commons-jxpath
felix-osgi-core-javadoc
felix-osgi-core
felix-osgi-compendium
felix-osgi-compendium-javadoc
maven-enforcer-api
maven-enforcer
maven-enforcer-rules
maven-enforcer-plugin
maven-enforcer-javadoc
xml-commons-apis
xml-commons-apis-javadoc
xml-commons-apis-manual
apache-commons-cli
apache-commons-cli-javadoc
plexus-sec-dispatcher
plexus-sec-dispatcher-javadoc
maven-remote-resources-plugin
maven-remote-resources-plugin-javadoc
javamail-javadoc
javamail
objectweb-pom
regexp-javadoc
regexp
exec-maven-plugin-javadoc
exec-maven-plugin
jflex-javadoc
jflex
powermock-testng
powermock-reflect
powermock-junit4
powermock-javadoc
powermock-core
powermock-common
powermock-api-support
powermock-api-mockito
powermock-api-easymock
maven-verifier
maven-verifier-javadoc
plexus-cli
plexus-cli-javadoc
xmlunit-javadoc
xmlunit
geronimo-parent-poms
plexus-containers-component-metadata
plexus-containers-component-annotations
plexus-containers-component-javadoc
plexus-containers
plexus-containers-container-default
plexus-containers-javadoc
maven-doxia-sitetools-javadoc
maven-doxia-sitetools
jansi-native
jansi-native-javadoc
maven-doxia-javadoc
maven-doxia
maven-doxia-module-apt
maven-doxia-module-confluence
maven-doxia-module-docbook-simple
maven-doxia-module-fml
maven-doxia-core
maven-doxia-logging-api
maven-doxia-module-latex
maven-doxia-module-twiki
maven-doxia-module-xdoc
maven-doxia-module-xhtml
maven-doxia-modules
maven-doxia-sink-api
maven-doxia-test-docs
maven-doxia-tests
maven-doxia-module-rtf
plexus-cipher
plexus-cipher-javadoc
velocity-javadoc
velocity-manual
velocity-demo
velocity
log4j-over-slf4j
slf4j-jcl
slf4j-jdk14
slf4j-log4j12
slf4j-manual
slf4j-sources
jcl-over-slf4j
jul-to-slf4j
slf4j
slf4j-javadoc
slf4j-ext
maven-dependency-analyzer
xz-java
xz-java-javadoc
maven-dependency-analyzer-javadoc
apache-commons-beanutils (Red Hat package)
maven-antrun-plugin
maven-antrun-plugin-javadoc
commons-beanutils (Ubuntu package)
modello
modello-javadoc
maven-plugin-build-helper
maven-plugin-build-helper-javadoc
apache-commons-beanutils
apache-commons-beanutils-javadoc
felix-utils-javadoc
felix-utils
ant-apache-xalan2
ant-javadoc
ant-commons-logging
ant-commons-net
ant-javamail
ant-jdepend
ant-jmf
ant-jsch
ant-junit
ant-lib
ant-manual
ant-swing
ant-testutil
ant-xz
ant-apache-regexp
ant-apache-oro
ant-apache-resolver
ant-apache-log4j
ant-apache-bsf
ant-apache-bcel
ant-antlr
ant
maven-invoker-plugin
maven-invoker-plugin-javadoc
mockito-javadoc
mockito
dev-java/commons-beanutils
apache-commons-codec
apache-commons-codec-javadoc
fusesource-pom
jsoup
jsoup-javadoc
byaccj
hawtjni-runtime
maven-hawtjni-plugin
hawtjni
hawtjni-javadoc
jansi-javadoc
jansi
apache-commons-compress-javadoc
apache-commons-compress
plexus-interpolation-javadoc
plexus-interpolation
atinject-tck
atinject-javadoc
atinject
beust-jcommander-javadoc
beust-jcommander
qdox
qdox-javadoc
jdom2
jdom2-javadoc
jakarta-oro-javadoc
jakarta-oro
bsh-javadoc
bsh
bsh-manual
maven-model
maven-plugin-descriptor
maven-monitor
maven-project
maven-profile
maven-artifact
maven-artifact-manager
maven-plugin-registry
maven2-javadoc
maven-toolchain
maven-settings
maven-invoker-javadoc
maven-invoker
glassfish-jsp-api-javadoc
glassfish-jsp-api
apache-ivy-javadoc
apache-ivy
bsf
bsf-javadoc
maven-install-plugin
maven-install-plugin-javadoc
plexus-classworlds-javadoc
plexus-classworlds
objenesis-javadoc
objenesis
apache-commons-io-javadoc
apache-commons-io
apache-commons-lang-javadoc
apache-commons-lang
javacc-maven-plugin
javacc-maven-plugin-javadoc
xalan-j2
xalan-j2-xsltc
xalan-j2-manual
xalan-j2-javadoc
xalan-j2-demo
antlr-tool
antlr-C++
antlr-javadoc
antlr-manual
plexus-compiler-pom
plexus-compiler-javadoc
plexus-compiler-extras
plexus-compiler
jdepend
jdepend-demo
jdepend-javadoc
xerces-j2-demo
xerces-j2-javadoc
xerces-j2
jline-javadoc
jline
apache-resource-bundles
maven-surefire
maven-surefire-javadoc
maven-surefire-plugin
maven-surefire-provider-junit
maven-surefire-provider-testng
maven-surefire-report-parser
maven-surefire-report-plugin
maven-failsafe-plugin
jenkins (Red Hat package)
plexus-io-javadoc
plexus-io
maven-reporting-impl
maven-reporting-impl-javadoc
maven-file-management-javadoc
maven-shared-io-javadoc
maven-clean-plugin
maven-clean-plugin-javadoc
maven-shared-io
maven-file-management
xmvn-install
xmvn-resolve
xmvn-parent-pom
xmvn
xmvn-mojo
xmvn-minimal
xmvn-javadoc
xmvn-api
xmvn-core
xmvn-connector-ivy
xmvn-subst
xmvn-connector-aether
xmvn-bisect
xmvn-tools-pom
glassfish-el-api
glassfish-el-javadoc
glassfish-el
maven-common-artifact-filters
maven-common-artifact-filters-javadoc
maven-source-plugin
maven-source-plugin-javadoc
maven-dependency-plugin-javadoc
maven-dependency-plugin
maven-dependency-tree-javadoc
maven-dependency-tree
maven-reporting-api
maven-reporting-api-javadoc
maven-wagon-file
maven-jar-plugin
maven-wagon
maven-wagon-ftp
maven-jar-plugin-javadoc
maven-wagon-http
maven-wagon-http-lightweight
maven-wagon-http-shared
maven-wagon-javadoc
maven-wagon-provider-api
maven-wagon-providers
maven-resources-plugin-javadoc
plexus-utils
plexus-utils-javadoc
maven-resources-plugin
maven-shade-plugin
maven-shade-plugin-javadoc
maven-assembly-plugin-javadoc
maven-assembly-plugin
glassfish-servlet-api-javadoc
glassfish-servlet-api
maven-filtering-javadoc
maven-filtering
jakarta-commons-httpclient-manual
jakarta-commons-httpclient-javadoc
jakarta-commons-httpclient-demo
jakarta-commons-httpclient
maven-archiver-javadoc
maven-archiver
maven-shared-utils
maven-shared-utils-javadoc
apache-commons-collections-testframework
apache-commons-collections-javadoc
apache-commons-collections
cglib-javadoc
cglib
maven-plugin-testing-harness
maven-plugin-testing
maven-test-tools
maven-plugin-testing-javadoc
maven-plugin-testing-tools
maven-plugin-bundle
maven-plugin-bundle-javadoc
bnd-maven-plugin
aqute-bnd
aqute-bnd-javadoc
aqute-bndlib
maven-plugin-tools
maven-plugin-tools-annotations
maven-script-beanshell
maven-plugin-tools-java
maven-plugin-tools-ant
maven-plugin-tools-api
maven-plugin-tools-beanshell
maven-plugin-tools-generators
maven-plugin-tools-javadoc
maven-plugin-tools-javadocs
maven-plugin-tools-model
maven-plugin-plugin
maven-script-ant
maven-script
maven-plugin-annotations
easymock-javadoc
easymock
maven-javadoc
maven-lib
maven
plexus-archiver-javadoc
plexus-archiver
apache-commons-net-javadoc
apache-commons-net
maven-compiler-plugin
maven-compiler-plugin-javadoc
apache-commons-lang3
apache-commons-lang3-javadoc
assertj-core-javadoc
assertj-core
javassist
javassist-javadoc
guice-multibindings
guice-extensions
google-guice
guice-bom
guice-testlib
guice-assistedinject
google-guice-javadoc
guice-jndi
guice-parent
guice-throwingproviders
guice-grapher
guice-servlet
guice-jmx
httpcomponents-core-javadoc
httpcomponents-core
felix-parent
httpcomponents-client-cache
httpcomponents-client
httpcomponents-client-javadoc
xbean
xbean-javadoc
jvnet-parent
junit
junit-javadoc
junit-manual
jenkins-2-plugins (Red Hat package)
plexus-pom
ivy-local
python3-javapackages
maven-local
javapackages-filesystem
javapackages-local
javapackages-tools
osgi-compendium
osgi-compendium-javadoc
osgi-core
osgi-core-javadoc
osgi-annotation-javadoc
osgi-annotation
bcel-javadoc
bcel
objectweb-asm
objectweb-asm-javadoc
testng
testng-javadoc
javacc-manual
javacc-javadoc
javacc-demo
javacc
sonatype-oss-parent
glassfish-master-pom
sonatype-plugins-parent
httpcomponents-project
apache-parent
guava20-testlib
guava20-javadoc
guava20
jboss-parent
maven-shared
spice-parent
maven-parent
maven-plugins-pom
weld-parent
forge-parent
mojo-parent
apache-commons-parent

Install updates from vendor's website.

Apache Commons BeanUtils - addressed in versions 1.11.0, 2.0.0-M2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.1
IBM Disconnected Log Collector - update to 2.0.0
DataPower Operations Dashboard - update to 1.0.23.3
Netcool Operations Insight - update to 1.6.15
IBM Cloud Pak System - update to 2.3.6.0
Cloudera Observability with IBM - update to 3.6.2
Guardium Data Security Center (GDSC) - addressed in versions 3.8.1, 3.8.5
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.2.1
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 5.2
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component - update to 5.2.1
DataStage on Cloud Pak for Data - update to 5.2.1
Jira Service Management Data Center - update to 10.3.10
IBM Sterling File Gateway - addressed in versions 6.1.2.7.2, 6.2.0.5.1, 6.2.1.1.1
IBM Sterling B2B Integrator - addressed in versions 6.1.2.7.2, 6.2.0.5.1, 6.2.1.1.1
IBM Sterling Secure Proxy - addressed in versions 6.1.0.3, 6.2.0.3, 6.2.1.2
IBM Sterling External Authentication Server - addressed in versions 6.1.0.4, 6.1.1.2
IBM Tivoli Business Service Manager - update to 6.2.0.6
IBM Sterling Partner Engagement Manager - addressed in versions 6.2.3.5, 6.2.4.2
IBM Sterling Control Center - update to 6.4.0.0.2
Jazz Reporting Service - addressed in versions 7.0.2 iFix0036, 7.0.3 iFix020, 7.1 iFix005
Crowd Server - update to 7.1.4
IBM Tivoli Netcool Impact - update to 7.1.0.37
Crowd Data Center - update to 7.1.4
IBM Spectrum Symphony - update to 7.3.2 FP3
IBM Qradar SIEM - update to 7.5.0 Update Pack 12 IF03
Juniper Secure Analytics (JSA) - update to 7.5.0 UP12 IF03
RSA Authentication Manager - update to 8.8 Patch 2
IBM Rational Build Forge - update to 8.0.0.29
IBM Tivoli Netcool/OMNIbus WebGUI - update to 8.1.0.39
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.18
Confluence Server - addressed in versions 8.5.24, 9.2.6, 9.5.2, 10.0.3
Confluence Data Center - addressed in versions 8.5.24, 9.2.6, 9.5.2, 10.0.3
Bitbucket Data Center - addressed in versions 8.19.25, 9.4.13
Bitbucket Server - addressed in versions 8.19.25, 9.4.13
IBM Common Licensing - update to 9.0.0.2
Bamboo Server - addressed in versions 9.6.15, 10.2.6, 11.0.3
IBM Engineering Requirements Management DOORS Next - update to 9.7.2.11
Jira Software Data Center - addressed in versions 9.12.34, 10.3.10
Event Streams - update to 12.2.1
IBM Transformation Extender Advanced - addressed in versions 10.0.1.10, 10.0.2.1
IBM InfoSphere Information Server - update to 11.7.1.6 Service pack 1
Oracle Communications BRM - Elastic Charging Engine - update to 12.0.0.8.0
plexus-build-api - update to 0.0.7-20
plexus-build-api-javadoc - update to 0.0.7-20
jsr-305 - update to 0-0.22.20130910svn
jsr-305-javadoc - update to 0-0.22.20130910svn
isorelax - update to 0-0.23.release20050331
isorelax-javadoc - update to 0-0.23.release20050331
jsch - update to 0.1.54-6
jsch-javadoc - update to 0.1.54-6
sisu-mojos-javadoc - update to 0.3.1-8
sisu-mojos - update to 0.3.1-8
sisu-javadoc - update to 0.3.3-7
sisu-plexus - update to 0.3.3-7
sisu-inject - update to 0.3.3-7
cal10n-javadoc - update to 0.8.1-7
cal10n - update to 0.8.1-7
maven-cal10n-plugin - update to 0.8.1-7
maven-artifact-transfer-javadoc - update to 0.9.0-4
maven-artifact-transfer - update to 0.9.0-4
plexus-languages - update to 0.9.10-3
plexus-languages-javadoc - update to 0.9.10-3
java_cup - update to 0.11b-8
java_cup-javadoc - update to 0.11b-8
java_cup-manual - update to 0.11b-8
jboss-interceptors-1.2-api-javadoc - update to 1.0.0-8
jboss-interceptors-1.2-api - update to 1.0.0-8
plexus-i18n-javadoc - update to 1.0-0.11.b10.4
plexus-i18n - update to 1.0-0.11.b10.4
plexus-component-factories-pom - update to 1.0-0.15.alpha11
plexus-bsh-factory - update to 1.0-0.19.a7
plexus-bsh-factory-javadoc - update to 1.0-0.19.a7
plexus-ant-factory - update to 1.0-0.20.a2.2
plexus-ant-factory-javadoc - update to 1.0-0.20.a2.2
plexus-resources-javadoc - update to 1.0-0.23.a7
plexus-resources - update to 1.0-0.23.a7
plexus-component-api - update to 1.0-0.24.alpha15
plexus-component-api-javadoc - update to 1.0-0.24.alpha15
plexus-interactivity-javadoc - update to 1.0-0.27.alpha6
plexus-interactivity-api - update to 1.0-0.27.alpha6
plexus-interactivity - update to 1.0-0.27.alpha6
plexus-interactivity-jline - update to 1.0-0.27.alpha6
jtidy-javadoc - update to 1.0-0.28.20100930svn1125
jtidy - update to 1.0-0.28.20100930svn1125
ant-contrib-javadoc - update to 1.0-0.32.b3
ant-contrib - update to 1.0-0.32.b3
munge-maven-plugin-javadoc - update to 1.0-11
munge-maven-plugin - update to 1.0-11
aopalliance - update to 1.0-17
aopalliance-javadoc - update to 1.0-17
maven-artifact-resolver - update to 1.0-18
maven-artifact-resolver-javadoc - update to 1.0-18
geronimo-annotation-javadoc - update to 1.0-23
geronimo-annotation - update to 1.0-23
maven-resolver-javadoc - update to 1.1.1-2
maven-resolver-spi - update to 1.1.1-2
maven-resolver-test-util - update to 1.1.1-2
maven-resolver-transport-classpath - update to 1.1.1-2
maven-resolver-transport-wagon - update to 1.1.1-2
maven-resolver-util - update to 1.1.1-2
maven-resolver-connector-basic - update to 1.1.1-2
maven-resolver-api - update to 1.1.1-2
maven-resolver-transport-file - update to 1.1.1-2
maven-resolver-transport-http - update to 1.1.1-2
maven-resolver - update to 1.1.1-2
maven-resolver-impl - update to 1.1.1-2
geronimo-jpa-javadoc - update to 1.1.1-21
geronimo-jpa - update to 1.1.1-21
geronimo-jms - update to 1.1.1-25
geronimo-jms-javadoc - update to 1.1.1-25
jzlib-demo - update to 1.1.3-8
jzlib - update to 1.1.3-8
jzlib-javadoc - update to 1.1.3-8
jdom-javadoc - update to 1.1.3-17
jdom-demo - update to 1.1.3-17
jdom - update to 1.1.3-17
jaxen - update to 1.1.6-18
jaxen-demo - update to 1.1.6-18
jaxen-javadoc - update to 1.1.6-18
maven-script-interpreter-javadoc - update to 1.1-11
glassfish-legal - update to 1.1-11
maven-script-interpreter - update to 1.1-11
maven-shared-incremental-javadoc - update to 1.1-14
maven-shared-incremental - update to 1.1-14
felix-osgi-foundation-javadoc - update to 1.2.0-23
felix-osgi-foundation - update to 1.2.0-23
jdependency-javadoc - update to 1.2-2
jdependency - update to 1.2-2
os-maven-plugin - update to 1.2.3-9
os-maven-plugin-javadoc - update to 1.2.3-9
plexus-velocity - update to 1.2-4
plexus-velocity-javadoc - update to 1.2-4
cdi-api-javadoc - update to 1.2-8
cdi-api - update to 1.2-8
spec-version-maven-plugin-javadoc - update to 1.2-11
spec-version-maven-plugin - update to 1.2-11
apache-commons-logging-javadoc - update to 1.2-13
glassfish-annotation-api - update to 1.2-13
glassfish-annotation-api-javadoc - update to 1.2-13
apache-commons-logging - update to 1.2-13
log4j12 - update to 1.2.17-22
log4j12-javadoc - update to 1.2.17-22
xml-commons-resolver-javadoc - update to 1.2-26
xml-commons-resolver - update to 1.2-26
plexus-components-pom - update to 1.3.1-10
apache-commons-exec - update to 1.3-8.0.1
apache-commons-exec-javadoc - update to 1.3-8.0.1
hamcrest - update to 1.3-23
hamcrest-core - update to 1.3-23
hamcrest-demo - update to 1.3-23
hamcrest-javadoc - update to 1.3-23
apache-commons-jxpath-javadoc - update to 1.3-29
apache-commons-jxpath - update to 1.3-29
felix-osgi-core-javadoc - update to 1.4.0-23
felix-osgi-core - update to 1.4.0-23
felix-osgi-compendium - update to 1.4.0-26
felix-osgi-compendium-javadoc - update to 1.4.0-26
maven-enforcer-api - update to 1.4.1-8
maven-enforcer - update to 1.4.1-8
maven-enforcer-rules - update to 1.4.1-8
maven-enforcer-plugin - update to 1.4.1-8
maven-enforcer-javadoc - update to 1.4.1-8
xml-commons-apis - update to 1.4.01-25
xml-commons-apis-javadoc - update to 1.4.01-25
xml-commons-apis-manual - update to 1.4.01-25
apache-commons-cli - update to 1.4-4
apache-commons-cli-javadoc - update to 1.4-4
plexus-sec-dispatcher - update to 1.4-26
plexus-sec-dispatcher-javadoc - update to 1.4-26
maven-remote-resources-plugin - update to 1.5-2
maven-remote-resources-plugin-javadoc - update to 1.5-2
javamail-javadoc - update to 1.5.2-7
javamail - update to 1.5.2-7
objectweb-pom - update to 1.5-7
regexp-javadoc - update to 1.5-26
regexp - update to 1.5-26
exec-maven-plugin-javadoc - update to 1.6.0-3
exec-maven-plugin - update to 1.6.0-3
jflex-javadoc - update to 1.6.1-12
jflex - update to 1.6.1-12
powermock-testng - update to 1.6.5-9
powermock-reflect - update to 1.6.5-9
powermock-junit4 - update to 1.6.5-9
powermock-javadoc - update to 1.6.5-9
powermock-core - update to 1.6.5-9
powermock-common - update to 1.6.5-9
powermock-api-support - update to 1.6.5-9
powermock-api-mockito - update to 1.6.5-9
powermock-api-easymock - update to 1.6.5-9
maven-verifier - update to 1.6-6
maven-verifier-javadoc - update to 1.6-6
plexus-cli - update to 1.6-6
plexus-cli-javadoc - update to 1.6-6
xmlunit-javadoc - update to 1.6-7
xmlunit - update to 1.6-7
geronimo-parent-poms - update to 1.6-25
plexus-containers-component-metadata - update to 1.7.1-8
plexus-containers-component-annotations - update to 1.7.1-8
plexus-containers-component-javadoc - update to 1.7.1-8
plexus-containers - update to 1.7.1-8
plexus-containers-container-default - update to 1.7.1-8
plexus-containers-javadoc - update to 1.7.1-8
maven-doxia-sitetools-javadoc - update to 1.7.5-2
maven-doxia-sitetools - update to 1.7.5-2
jansi-native - update to 1.7-7
jansi-native-javadoc - update to 1.7-7
maven-doxia-javadoc - update to 1.7-8
maven-doxia - update to 1.7-8
maven-doxia-module-apt - update to 1.7-8
maven-doxia-module-confluence - update to 1.7-8
maven-doxia-module-docbook-simple - update to 1.7-8
maven-doxia-module-fml - update to 1.7-8
maven-doxia-core - update to 1.7-8
maven-doxia-logging-api - update to 1.7-8
maven-doxia-module-latex - update to 1.7-8
maven-doxia-module-twiki - update to 1.7-8
maven-doxia-module-xdoc - update to 1.7-8
maven-doxia-module-xhtml - update to 1.7-8
maven-doxia-modules - update to 1.7-8
maven-doxia-sink-api - update to 1.7-8
maven-doxia-test-docs - update to 1.7-8
maven-doxia-tests - update to 1.7-8
maven-doxia-module-rtf - update to 1.7-8
plexus-cipher - update to 1.7-14
plexus-cipher-javadoc - update to 1.7-14
velocity-javadoc - update to 1.7-24
velocity-manual - update to 1.7-24
velocity-demo - update to 1.7-24
velocity - update to 1.7-24
log4j-over-slf4j - update to 1.7.25-4
slf4j-jcl - update to 1.7.25-4
slf4j-jdk14 - update to 1.7.25-4
slf4j-log4j12 - update to 1.7.25-4
slf4j-manual - update to 1.7.25-4
slf4j-sources - update to 1.7.25-4
jcl-over-slf4j - update to 1.7.25-4
jul-to-slf4j - update to 1.7.25-4
slf4j - update to 1.7.25-4
slf4j-javadoc - update to 1.7.25-4
slf4j-ext - update to 1.7.25-4
maven-dependency-analyzer - update to 1.8-2
xz-java - update to 1.8-2
xz-java-javadoc - update to 1.8-2
maven-dependency-analyzer-javadoc - update to 1.8-2
apache-commons-beanutils (Red Hat package) - addressed in versions 1.8.3-15.el7_9.1, 1.9.4-9.el9_4.1, 1.9.4-21.el10_0
maven-antrun-plugin - update to 1.8-6
maven-antrun-plugin-javadoc - update to 1.8-6
commons-beanutils (Ubuntu package) - addressed in versions 1.9.1-1ubuntu0.1~esm2, 1.9.2-3ubuntu0.1~esm1, 1.9.3-1ubuntu0.1~esm2, 1.9.4-1ubuntu0.20.04.1~esm1, 1.9.4-1+deb11u1build0.22.04.1, 1.9.4-2ubuntu0.1~esm1
modello - update to 1.9.1-7
modello-javadoc - update to 1.9.1-7
maven-plugin-build-helper - update to 1.9.1-8
maven-plugin-build-helper-javadoc - update to 1.9.1-8
apache-commons-beanutils - addressed in versions 1.9.3-5, 1.11.0-1
apache-commons-beanutils-javadoc - addressed in versions 1.9.3-5, 1.11.0-1
apache-commons-beanutils - update to 1.9.4-4
apache-commons-beanutils-javadoc - update to 1.9.4-4
apache-commons-beanutils - addressed in versions 1.9.4-39.fc41, 1.9.4-39.fc42
felix-utils-javadoc - update to 1.10.4-2
felix-utils - update to 1.10.4-2
ant-apache-xalan2 - update to 1.10.5-1
ant-javadoc - update to 1.10.5-1
ant-commons-logging - update to 1.10.5-1
ant-commons-net - update to 1.10.5-1
ant-javamail - update to 1.10.5-1
ant-jdepend - update to 1.10.5-1
ant-jmf - update to 1.10.5-1
ant-jsch - update to 1.10.5-1
ant-junit - update to 1.10.5-1
ant-lib - update to 1.10.5-1
ant-manual - update to 1.10.5-1
ant-swing - update to 1.10.5-1
ant-testutil - update to 1.10.5-1
ant-xz - update to 1.10.5-1
ant-apache-regexp - update to 1.10.5-1
ant-apache-oro - update to 1.10.5-1
ant-apache-resolver - update to 1.10.5-1
ant-apache-log4j - update to 1.10.5-1
ant-apache-bsf - update to 1.10.5-1
ant-apache-bcel - update to 1.10.5-1
ant-antlr - update to 1.10.5-1
ant - update to 1.10.5-1
maven-invoker-plugin - update to 1.10-7
maven-invoker-plugin-javadoc - update to 1.10-7
mockito-javadoc - update to 1.10.19-17
mockito - update to 1.10.19-17
dev-java/commons-beanutils - update to 1.11.0
apache-commons-beanutils-javadoc - addressed in versions 1.11.0-7.3.1, 1.11.0-150200.3.9.1
apache-commons-beanutils - addressed in versions 1.11.0-7.3.1, 1.11.0-150200.3.9.1
apache-commons-codec - update to 1.11-3
apache-commons-codec-javadoc - update to 1.11-3
fusesource-pom - update to 1.11-3
jsoup - update to 1.11.3-3
jsoup-javadoc - update to 1.11.3-3
byaccj - update to 1.15-17
hawtjni-runtime - update to 1.16-2
maven-hawtjni-plugin - update to 1.16-2
hawtjni - update to 1.16-2
hawtjni-javadoc - update to 1.16-2
jansi-javadoc - update to 1.17.1-1
jansi - update to 1.17.1-1
apache-commons-compress-javadoc - update to 1.18-1
apache-commons-compress - update to 1.18-1
plexus-interpolation-javadoc - update to 1.22-9
plexus-interpolation - update to 1.22-9
atinject-tck - update to 1-28.20100611svn86
atinject-javadoc - update to 1-28.20100611svn86
atinject - update to 1-28.20100611svn86
beust-jcommander-javadoc - update to 1.71-5
beust-jcommander - update to 1.71-5
AMQ Streams - update to 2
qdox - update to 2.0-3.M9
qdox-javadoc - update to 2.0-3.M9
jdom2 - update to 2.0.6-12
jdom2-javadoc - update to 2.0.6-12
jakarta-oro-javadoc - update to 2.0.8-23
jakarta-oro - update to 2.0.8-23
bsh-javadoc - update to 2.0-13.b6
bsh - update to 2.0-13.b6
bsh-manual - update to 2.0-13.b6
maven-model - update to 2.2.1-59
maven-plugin-descriptor - update to 2.2.1-59
maven-monitor - update to 2.2.1-59
maven-project - update to 2.2.1-59
maven-profile - update to 2.2.1-59
maven-artifact - update to 2.2.1-59
maven-artifact-manager - update to 2.2.1-59
maven-plugin-registry - update to 2.2.1-59
maven2-javadoc - update to 2.2.1-59
maven-toolchain - update to 2.2.1-59
maven-settings - update to 2.2.1-59
maven-invoker-javadoc - update to 2.2-7
maven-invoker - update to 2.2-7
Storage Copy Data Management - update to 2.2.27.0
glassfish-jsp-api-javadoc - update to 2.3.2-0.9.b01
glassfish-jsp-api - update to 2.3.2-0.9.b01
apache-ivy-javadoc - update to 2.4.0-14
apache-ivy - update to 2.4.0-14
bsf - update to 2.4.0-30
bsf-javadoc - update to 2.4.0-30
maven-install-plugin - update to 2.5.2-7
maven-install-plugin-javadoc - update to 2.5.2-7
plexus-classworlds-javadoc - update to 2.5.2-9
plexus-classworlds - update to 2.5.2-9
objenesis-javadoc - update to 2.6-2
objenesis - update to 2.6-2
apache-commons-io-javadoc - update to 2.6-3
apache-commons-io - update to 2.6-3
apache-commons-lang-javadoc - update to 2.6-21
apache-commons-lang - update to 2.6-21
javacc-maven-plugin - update to 2.6-25
javacc-maven-plugin-javadoc - update to 2.6-25
xalan-j2 - update to 2.7.1-38
xalan-j2-xsltc - update to 2.7.1-38
xalan-j2-manual - update to 2.7.1-38
xalan-j2-javadoc - update to 2.7.1-38
xalan-j2-demo - update to 2.7.1-38
antlr-tool - update to 2.7.7-56
antlr-C++ - update to 2.7.7-56
antlr-javadoc - update to 2.7.7-56
antlr-manual - update to 2.7.7-56
plexus-compiler-pom - update to 2.8.2-2
plexus-compiler-javadoc - update to 2.8.2-2
plexus-compiler-extras - update to 2.8.2-2
plexus-compiler - update to 2.8.2-2
jdepend - update to 2.9.1-18
jdepend-demo - update to 2.9.1-18
jdepend-javadoc - update to 2.9.1-18
xerces-j2-demo - update to 2.11.0-34
xerces-j2-javadoc - update to 2.11.0-34
xerces-j2 - update to 2.11.0-34
jline-javadoc - update to 2.14.6-2
jline - update to 2.14.6-2
apache-resource-bundles - update to 2-20
maven-surefire - update to 2.22.0-3
maven-surefire-javadoc - update to 2.22.0-3
maven-surefire-plugin - update to 2.22.0-3
maven-surefire-provider-junit - update to 2.22.0-3
maven-surefire-provider-testng - update to 2.22.0-3
maven-surefire-report-parser - update to 2.22.0-3
maven-surefire-report-plugin - update to 2.22.0-3
maven-failsafe-plugin - update to 2.22.0-3
jenkins (Red Hat package) - addressed in versions 2.516.2.1756731431-3.el9, 2.516.2.1756732303-3.el9, 2.516.2.1756733848-3.el9, 2.516.2.1756738247-3.el8, 2.516.2.1756902120-3.el8, 2.516.2.1756902453-3.el8, 2.516.2.1756903379-3.el9, 2.516.2.1757087588-3.el8
plexus-io-javadoc - update to 3.0.0-2
plexus-io - update to 3.0.0-2
maven-reporting-impl - update to 3.0.0-4
maven-reporting-impl-javadoc - update to 3.0.0-4
maven-file-management-javadoc - update to 3.0.0-5
maven-shared-io-javadoc - update to 3.0.0-5
maven-clean-plugin - update to 3.0.0-5
maven-clean-plugin-javadoc - update to 3.0.0-5
maven-shared-io - update to 3.0.0-5
maven-file-management - update to 3.0.0-5
xmvn-install - update to 3.0.0-21
xmvn-resolve - update to 3.0.0-21
xmvn-parent-pom - update to 3.0.0-21
xmvn - update to 3.0.0-21
xmvn-mojo - update to 3.0.0-21
xmvn-minimal - update to 3.0.0-21
xmvn-javadoc - update to 3.0.0-21
xmvn-api - update to 3.0.0-21
xmvn-core - update to 3.0.0-21
xmvn-connector-ivy - update to 3.0.0-21
xmvn-subst - update to 3.0.0-21
xmvn-connector-aether - update to 3.0.0-21
xmvn-bisect - update to 3.0.0-21
xmvn-tools-pom - update to 3.0.0-21
glassfish-el-api - update to 3.0.1-0.7.b08
glassfish-el-javadoc - update to 3.0.1-0.7.b08
glassfish-el - update to 3.0.1-0.7.b08
maven-common-artifact-filters - update to 3.0.1-4
maven-common-artifact-filters-javadoc - update to 3.0.1-4
maven-source-plugin - update to 3.0.1-4
maven-source-plugin-javadoc - update to 3.0.1-4
maven-dependency-plugin-javadoc - update to 3.0.2-2
maven-dependency-plugin - update to 3.0.2-2
maven-dependency-tree-javadoc - update to 3.0-5
maven-dependency-tree - update to 3.0-5
Financial Transaction Manager for ACH Services and Check Services - update to 3.0.5.4 iFix 28
maven-reporting-api - update to 3.0-14
maven-reporting-api-javadoc - update to 3.0-14
maven-wagon-file - update to 3.1.0-1
maven-jar-plugin - update to 3.1.0-1
maven-wagon - update to 3.1.0-1
maven-wagon-ftp - update to 3.1.0-1
maven-jar-plugin-javadoc - update to 3.1.0-1
maven-wagon-http - update to 3.1.0-1
maven-wagon-http-lightweight - update to 3.1.0-1
maven-wagon-http-shared - update to 3.1.0-1
maven-wagon-javadoc - update to 3.1.0-1
maven-wagon-provider-api - update to 3.1.0-1
maven-wagon-providers - update to 3.1.0-1
maven-resources-plugin-javadoc - update to 3.1.0-3
plexus-utils - update to 3.1.0-3
plexus-utils-javadoc - update to 3.1.0-3
maven-resources-plugin - update to 3.1.0-3
maven-shade-plugin - update to 3.1.0-3
maven-shade-plugin-javadoc - update to 3.1.0-3
maven-assembly-plugin-javadoc - update to 3.1.0-3
maven-assembly-plugin - update to 3.1.0-3
glassfish-servlet-api-javadoc - update to 3.1.0-14
glassfish-servlet-api - update to 3.1.0-14
maven-filtering-javadoc - update to 3.1.1-5
maven-filtering - update to 3.1.1-5
jakarta-commons-httpclient-manual - update to 3.1-28
jakarta-commons-httpclient-javadoc - update to 3.1-28
jakarta-commons-httpclient-demo - update to 3.1-28
jakarta-commons-httpclient - update to 3.1-28
maven-archiver-javadoc - update to 3.2.0-2
maven-archiver - update to 3.2.0-2
maven-shared-utils - update to 3.2.1-0.1
maven-shared-utils-javadoc - update to 3.2.1-0.1
apache-commons-collections-testframework - update to 3.2.2-10
apache-commons-collections-javadoc - update to 3.2.2-10
apache-commons-collections - update to 3.2.2-10
cglib-javadoc - update to 3.2.4-7
cglib - update to 3.2.4-7
maven-plugin-testing-harness - update to 3.3.0-12
maven-plugin-testing - update to 3.3.0-12
maven-test-tools - update to 3.3.0-12
maven-plugin-testing-javadoc - update to 3.3.0-12
maven-plugin-testing-tools - update to 3.3.0-12
maven-plugin-bundle - update to 3.5.0-2
maven-plugin-bundle-javadoc - update to 3.5.0-2
bnd-maven-plugin - update to 3.5.0-4
aqute-bnd - update to 3.5.0-4
aqute-bnd-javadoc - update to 3.5.0-4
aqute-bndlib - update to 3.5.0-4
maven-plugin-tools - update to 3.5.1-4
maven-plugin-tools-annotations - update to 3.5.1-4
maven-script-beanshell - update to 3.5.1-4
maven-plugin-tools-java - update to 3.5.1-4
maven-plugin-tools-ant - update to 3.5.1-4
maven-plugin-tools-api - update to 3.5.1-4
maven-plugin-tools-beanshell - update to 3.5.1-4
maven-plugin-tools-generators - update to 3.5.1-4
maven-plugin-tools-javadoc - update to 3.5.1-4
maven-plugin-tools-javadocs - update to 3.5.1-4
maven-plugin-tools-model - update to 3.5.1-4
maven-plugin-plugin - update to 3.5.1-4
maven-script-ant - update to 3.5.1-4
maven-script - update to 3.5.1-4
maven-plugin-annotations - update to 3.5.1-4
easymock-javadoc - update to 3.5-4
easymock - update to 3.5-4
maven-javadoc - update to 3.5.4-5
maven-lib - update to 3.5.4-5
maven - update to 3.5.4-5
plexus-archiver-javadoc - update to 3.6.0-1
plexus-archiver - update to 3.6.0-1
apache-commons-net-javadoc - update to 3.6-3
apache-commons-net - update to 3.6-3
maven-compiler-plugin - update to 3.7.0-2
maven-compiler-plugin-javadoc - update to 3.7.0-2
apache-commons-lang3 - update to 3.7-3
apache-commons-lang3-javadoc - update to 3.7-3
assertj-core-javadoc - update to 3.8.0-2
assertj-core - update to 3.8.0-2
javassist - update to 3.18.1-8
javassist-javadoc - update to 3.18.1-8
guice-multibindings - update to 4.1-11
guice-extensions - update to 4.1-11
google-guice - update to 4.1-11
guice-bom - update to 4.1-11
guice-testlib - update to 4.1-11
guice-assistedinject - update to 4.1-11
google-guice-javadoc - update to 4.1-11
guice-jndi - update to 4.1-11
guice-parent - update to 4.1-11
guice-throwingproviders - update to 4.1-11
guice-grapher - update to 4.1-11
guice-servlet - update to 4.1-11
guice-jmx - update to 4.1-11
httpcomponents-core-javadoc - update to 4.4.10-4
httpcomponents-core - update to 4.4.10-4
felix-parent - update to 4-5
httpcomponents-client-cache - update to 4.5.5-4
httpcomponents-client - update to 4.5.5-4
httpcomponents-client-javadoc - update to 4.5.5-4
xbean - update to 4.8-1
xbean-javadoc - update to 4.8-1
jvnet-parent - update to 4-10
Red Hat Camel for Spring Boot - update to 4.10.3
junit - update to 4.12-9
junit-javadoc - update to 4.12-9
junit-manual - update to 4.12-9
jenkins-2-plugins (Red Hat package) - addressed in versions 4.12.1756902839-1.el8, 4.13.1756901992-1.el8, 4.14.1757087858-1.el8, 4.15.1756735456-1.el8, 4.16.1756734507-1.el9, 4.17.1756732064-1.el9, 4.18.1756731677-1.el9, 4.19.1756901647-1.el9
plexus-pom - update to 5.0-2
ivy-local - update to 5.3.0-2
python3-javapackages - update to 5.3.0-2
maven-local - update to 5.3.0-2
javapackages-filesystem - update to 5.3.0-2
javapackages-local - update to 5.3.0-2
javapackages-tools - update to 5.3.0-2
osgi-compendium - update to 6.0.0-5
osgi-compendium-javadoc - update to 6.0.0-5
osgi-core - update to 6.0.0-6
osgi-core-javadoc - update to 6.0.0-6
osgi-annotation-javadoc - update to 6.0.0-7
osgi-annotation - update to 6.0.0-7
bcel-javadoc - update to 6.2-2
bcel - update to 6.2-2
objectweb-asm - update to 6.2-5
objectweb-asm-javadoc - update to 6.2-5
testng - update to 6.14.3-5
testng-javadoc - update to 6.14.3-5
javacc-manual - update to 7.0.2-6
javacc-javadoc - update to 7.0.2-6
javacc-demo - update to 7.0.2-6
javacc - update to 7.0.2-6
IBM Engineering Lifecycle Optimization - Publishing - addressed in versions 7.0.2.36, 7.0.3.17, 7.1.0.5
AMQ Broker - addressed in versions 7.12.5, 7.13.1
sonatype-oss-parent - update to 7-14
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.2.1
Storage Protect for Space Management - update to 8.2.1
Db2 Big SQL - update to 8.2.1
Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.2.1
Storage Protect Client - update to 8.2.1
glassfish-master-pom - update to 8-11
sonatype-plugins-parent - update to 8-12
httpcomponents-project - update to 9-2
Guardium Data Protection - update to 12.0p50
App Connect Enterprise Certified Container - update to 12.0.17
apache-parent - update to 19-2
guava20-testlib - update to 20.0-8
guava20-javadoc - update to 20.0-8
guava20 - update to 20.0-8
jboss-parent - update to 20-4
maven-shared - update to 22-6
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF006, 24.0.1-IF005, 25.0.0-IF001
spice-parent - update to 26-8
maven-parent - update to 27-5
maven-plugins-pom - update to 28-7
weld-parent - update to 34-5
forge-parent - update to 38-11
mojo-parent - update to 40-6
apache-commons-parent - update to 43-2

• http://www.openwall.com/lists/oss-security/2025/05/28/6
• https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9

• Improper access control in Apache Commons BeanUtils
• Fedora 42 update for apache-commons-beanutils
• Fedora 41 update for apache-commons-beanutils
• SUSE update for apache-commons-beanutils
• Anolis OS update for apache-commons-beanutils
• SUSE update for apache-commons-beanutils
• Red Hat Enterprise Linux 10 update for apache-commons-beanutils
• Red Hat Enterprise Linux 9 update for apache-commons-beanutils
• Multiple vulnerabilities in IBM Tivoli Business Service Manager
• Multiple vulnerabilities in AMQ Streams
• Multiple vulnerabilities in Red Hat Camel for Spring Boot 4.10
• openEuler update for apache-commons-beanutils
• IBM Integration Designer update for Apache Commons
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for apache-commons-beanutils
• openEuler 24.03 LTS SP2 update for apache-commons-beanutils
• Improper access control in Oracle Communications Network Integrity
• Improper access control in Oracle Communications BRM - Elastic Charging Engine
• Improper access control in Oracle Communications Order and Service Management
• Improper access control in Oracle Communications MetaSolv Solution
• Multiple vulnerabilities in Oracle Communications Unified Inventory Management
• Improper access control in Oracle Communications Convergence
• Multiple vulnerabilities in Oracle Financial Services Behavior Detection Platform
• Multiple vulnerabilities in Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
• Improper access control in Oracle Financial Services Model Management and Governance
• Multiple vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure
• Improper access control in Oracle Application Testing Suite
• Improper access control in Primavera Unifier
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Service Communication Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Slice Selection Function
• Multiple vulnerabilities in Oracle Communications Element Manager
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Exposure Function
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Multiple vulnerabilities in Oracle Healthcare Master Person Index
• Improper access control in Identity Manager
• Multiple vulnerabilities in Oracle Middleware Common Libraries and Tools
• Multiple vulnerabilities in Oracle Data Integrator
• Improper access control in Oracle WebCenter Portal
• Improper access control in Oracle Service Bus
• Multiple vulnerabilities in Oracle WebLogic Server
• Multiple vulnerabilities in IBM QRadar SIEM
• Bamboo Data Center and Server update for Apache Commons BeanUtils
• IBM Cloud Pak System update for Apache Commons
• Anolis OS update for javapackages-tools:201801 module
• Multiple vulnerabilities in AMQ Broker 7.13
• Multiple vulnerabilities in Juniper Secure Analytics
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Application Performance Management
• RSA Authentication Manager update for third-party components
• IBM SPSS Collaboration and Deployment Services update for Apache Commons
• IBM Watson Discovery update for Apache Commons
• IBM Watson Speech Services Cartridge update for Apache Commons
• Multiple vulnerabilities in IBM Common Licensing
• IBM DataStage on Cloud Pak for Data update for Apache Commons
• IBM SPSS Analytic Server update for Apache Commons
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Red Hat Product OCP Tools 4 update for OpenShift Jenkins
• Confluence Data Center and Server update for Apache Commons BeanUtils
• Multiple vulnerabilities in AMQ Broker 7.12
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Storage Copy Data Management
• IBM InfoSphere Information Server update for Apache Commons
• IBM Engineering Lifecycle Optimization - Publishing update for Apache Commons
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in Communications Unified Assurance
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Improper access control in Oracle JDeveloper
• Multiple vulnerabilities in Oracle Documaker
• Multiple vulnerabilities in Oracle Insurance Policy Administration
• Improper access control in Infrastructure Technology
• Multiple vulnerabilities in Oracle Hyperion Calculation Manager
• Improper access control in Hyperion Planning
• Multiple vulnerabilities in Oracle Hospitality Cruise Shipboard Property Management System
• Improper access control in Oracle Retail Predictive Application Server
• Multiple vulnerabilities in Oracle Retail Price Management
• Improper access control in Oracle Retail Invoice Matching
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• Multiple vulnerabilities in JD Edwards EnterpriseOne Tools
• Multiple vulnerabilities in Oracle Utilities Application Framework
• Multiple vulnerabilities in Oracle Solaris Cluster
• IBM Spectrum Symphony update for Apache Commons
• Multiple vulnerabilities in IBM Tivoli Netcool Impact
• IBM Control Center update for Apache Commons
• IBM Tivoli Netcool/OMNIbus WebGUI update for Apache Commons
• IBM App Connect Enterprise Certified Container DesignerAuthoring, IntegrationRuntime and IntegrationServer operands update for Apache Commons
• Multiple vulnerabilities in Cloudera Observability on Premises with IBM
• Bitbucket Data Center and Server update for Apache Commons BeanUtils
• Multiple vulnerabilities in Netcool Operations Insight
• IBM Sterling B2B Integrator and IBM Sterling File Gateway update for Apache Commons
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Sterling Partner Engagement Manager Essentials Edition
• IBM Transformation Extender Advanced update for Apache Commons
• Multiple vulnerabilities in Primavera P6 Enterprise Project Portfolio Management
• Multiple vulnerabilities in Oracle Communications Policy Management
• Multiple vulnerabilities in Oracle Banking Liquidity Management
• Multiple vulnerabilities in Oracle Banking Cash Management
• Improper access control in Oracle Succession planning
• Improper access control in Oracle Field Service
• Improper access control in Oracle Human Resources
• Improper access control in Oracle Time and Labor
• Improper access control in Oracle Retail Advanced Inventory Planning
• Multiple vulnerabilities in Oracle Retail Fiscal Management
• Improper access control in Oracle Retail Allocation
• Multiple vulnerabilities in Oracle Agile PLM Framework
• Multiple vulnerabilities in IBM Disconnected Log Collector
• Multiple vulnerabilities in Oracle Retail Xstore Point of Service
• Multiple vulnerabilities in Oracle Retail Service Backbone
• Multiple vulnerabilities in Oracle Retail Integration Bus
• IBM Jazz Reporting Service update for Apache Commons
• Gentoo update for Commons-BeanUtils
• IBM Db2 Big SQL on Cloud Pak for Data update for Apache Commons
• IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component update for Apache Commons
• Multiple vulnerabilities in IBM Financial Transaction Manager for ACH Services and Check Services for Multi-Platform
• Multiple vulnerabilities in IBM Sterling External Authentication Server
• Crowd Data Center and Server update for Apache Commons BeanUtils
• Multiple vulnerabilities in IBM Library Support for Struts
• Multiple vulnerabilities in IBM Guardium Data Protection
• Multiple vulnerabilities in IBM Rational Developer for i
• Multiple vulnerabilities in IBM Rational Build Forge
• IBM Event Streams update for Apache Commons
• Multiple vulnerabilities in IBM Engineering Requirements Management DOORS and DOORS Web Access
• Multiple vulnerabilities in IBM Secure Proxy
• IBM DataPower Operations Dashboard update for Apache Commons
• Multiple vulnerabilities in IBM Storage Protect Backup-Archive Client, IBM Storage Protect for Virtual Environments and IBM Storage Protect for Space Management
• Multiple vulnerabilities in Oracle Banking Origination
• Multiple vulnerabilities in Oracle Insurance Policy Administration Operational Data Store for Life and Annuity
• Multiple vulnerabilities in Oracle Banking Corporate Lending Process Management
• Improper access control in Oracle Yard Management
• Improper access control in Oracle Advanced Supply Chain Planning
• Improper access control in Oracle Flow Manufacturing
• Improper access control in Oracle Rapid Planning
• Improper access control in Oracle Global Order Promising
• Improper access control in Oracle iProcurement
• Multiple vulnerabilities in Oracle Commerce Guided Search
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Jira Software Data Center update for commons-beanutils
• Jira Service Management Data Center update for commons-beanutils
• Multiple vulnerabilities in IBM Watson Knowledge Catalog on-prem
• Ubuntu update for commons-beanutils