Red Hat Security AdvisoryRHSA-2012:0441
JBoss Enterprise BRMS Platform 5.2.0 update
Released 2012-04-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- JBoss Enterprise BRMS Platform 5.2
Fixes 3 records
Priority LOW 32
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribut…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.03074 · Published 2012-01-27 · Partial fix · 0.9.6 CWE-20
Priority LOW 29
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.1 CWE-200
Priority LOW 29
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.2 CWE-200
