Red Hat Security AdvisoryRHSA-2012:0519
JBoss Enterprise Portal Platform 5.2.1 update
Released 2012-04-25 · Red Hat rating Moderate · View on Red Hat →
Fixes 3 records
Priority LOW 32
message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribut…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.03074 · Published 2012-01-27 · Partial fix · 0.9.6 CWE-20
Priority LOW 29
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.1 CWE-200
Priority LOW 29
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.2 CWE-200
