Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_enterprise_linux_6:compat-expat1 compat-expat1 as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: compat-expat1 | none available | csaf_redhat | |
| red_hat_enterprise_linux_6:compat-expat1.src compat-expat1.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: compat-expat1.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:expat expat as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_6:expat expat as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:expat expat as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:expat expat as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:expat expat as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_jboss_core_services:expat expat as a component of Red Hat JBoss Core Services | affected | no version stated vendor label: expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:expat-devel expat-devel as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: expat-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_6:expat-devel expat-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: expat-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:expat-devel expat-devel as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: expat-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:expat-devel expat-devel as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: expat-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:expat-devel expat-devel as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: expat-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:expat-static expat-static as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: expat-static | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:expat.src expat.src as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_6:expat.src expat.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:expat.src expat.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:expat.src expat.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:expat.src expat.src as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:firefox firefox as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: firefox | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:firefox firefox as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: firefox | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:firefox firefox as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: firefox | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:firefox firefox as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: firefox | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:firefox-x11 firefox-x11 as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: firefox-x11 | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:firefox.src firefox.src as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: firefox.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_7:firefox.src firefox.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: firefox.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:firefox.src firefox.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: firefox.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:firefox.src firefox.src as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: firefox.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw-expat.src mingw-expat.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw-expat.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw32-expat mingw32-expat as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw32-expat | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw64-expat mingw64-expat as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: mingw64-expat | none available | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8 openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 | affected | openshift/ose-rhel-coreos-8 | none available | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9 openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 | affected | openshift/ose-rhel-coreos-9 | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:thunderbird thunderbird as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: thunderbird | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:thunderbird thunderbird as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: thunderbird | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:thunderbird thunderbird as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: thunderbird | none available | csaf_redhat | |
| red_hat_enterprise_linux_10:thunderbird.src thunderbird.src as a component of Red Hat Enterprise Linux 10 | affected | no version stated vendor label: thunderbird.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:thunderbird.src thunderbird.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: thunderbird.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_9:thunderbird.src thunderbird.src as a component of Red Hat Enterprise Linux 9 | affected | no version stated vendor label: thunderbird.src | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c xmlrpc-c as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c-c++ xmlrpc-c-c++ as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c-c++ | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c-client xmlrpc-c-client as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c-client | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c-client++ xmlrpc-c-client++ as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c-client++ | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c-devel xmlrpc-c-devel as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c-devel | none available | csaf_redhat | |
| red_hat_enterprise_linux_8:xmlrpc-c.src xmlrpc-c.src as a component of Red Hat Enterprise Linux 8 | affected | no version stated vendor label: xmlrpc-c.src | none available | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-dashboard-rhel9 rhoai/odh-dashboard-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | investigating | rhoai/odh-dashboard-rhel9 | not applicable | csaf_redhat | |
| red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9 rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI) | not affected vulnerable code not present | rhoai/odh-mlflow-rhel9 | not applicable | csaf_redhat | |
| https://github.com/libexpat/libexpat | affected | <= f31adfd584b7f6c50bbf4d22eb928538ffc9145a | none available | osv | |
| libexpat project/libexpat libexpat project · libexpat | affected | <= 2.7.5 | none available | cve_cna | |
| Siemens/RUGGEDCOM RST2428P Siemens · RUGGEDCOM RST2428P | affected | < V4.0 | none available | cve_adp | |
| Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Siemens · SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | affected | V3.1.5 | none available | cve_adp | |
| Siemens/SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP Siemens · SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | affected | V3.1.5 | none available | cve_adp | |
| Siemens/SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Siemens · SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | affected | V3.1.5 | none available | cve_adp |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.