Red Hat Security AdvisoryRHSA-2013:0763
JBoss Web Framework Kit 2.2.0 update
Released 2013-04-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Framework Kit 2.2
Fixes 2 records
Priority MEDIUM 46
XMLScanner.java in Apache Xerces2 Java, as used in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 and JDK and JRE 5.0 before Update 20, and in other products, allows remote attackers to cause a deni…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.3038 · Published 2009-08-06 · Fixed in 2.10.0
Priority LOW 38
Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.09254 · Published 2012-11-04 · Partial fix CWE-295