Red Hat Security AdvisoryRHSA-2011:1456
JBoss Enterprise SOA Platform 5.2.0 update
Released 2011-11-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss SOA Platform 5.1
Fixes 2 records
Priority LOW 35
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0294 · Published 2012-11-23 · Fixed CWE-287
Priority LOW 24
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS)…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02218 · Published 2012-11-23 · Fixed in 1.4.1 CWE-79
