Red Hat Security Advisory

RHSA-2009:1636

JBoss Enterprise Application Platform 4.3.0.CP07 update

Released 2009-12-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS glassfish-javamail-1.4.2-0jpp.ep1.5.el4, glassfish-jaxb-2.1.4-1.12.patch03.ep1.el4, glassfish-jaxb-javadoc-2.1.4-1.12.patch03.ep1.el4 +34
Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES glassfish-javamail-1.4.2-0jpp.ep1.5.el4, glassfish-jaxb-2.1.4-1.12.patch03.ep1.el4, glassfish-jaxb-javadoc-2.1.4-1.12.patch03.ep1.el4 +34

Fixes 5 records

TI-2009-02509 CVE-2009-2625 · GHSA-334p-wv2m-w3vp

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in…

MEDIUM 46

XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a deni…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.3038 Published 2009-08-06 Fixed in 2.10.0

TI-2009-00202 CVE-2009-0217 · GHSA-8hfm-837h-hjg5

The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as…

LOW 32

The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4,…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06363 Published 2009-07-14 Fixed in 1.4.3

TI-2009-02295 CVE-2009-2405 · GHSA-4q38-x98f-3p77

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0253 Published 2009-12-15 Fixed CWE-79

TI-2009-01313 CVE-2009-1380 · GHSA-8w77-5ggm-jhfw

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss…

LOW 25

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inje…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02326 Published 2009-12-15 Fixed CWE-79

TI-2009-03391 CVE-2009-3554 · GHSA-p46q-pmw2-55mw

Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2…

LOW 11

Twiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00383 Published 2009-12-15 Fixed CWE-200