Red Hat Security AdvisoryRHSA-2013:0953
Red Hat JBoss Portal 5.2.2 security update
Released 2013-06-18 · Red Hat rating Important · View on Red Hat →
Fixes 3 records
Priority MEDIUM 46
VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obt…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.11779 · Published 2012-12-05 · Partial fix · 3.0.6, 2.5.6.SEC03 +1 CWE-16
Priority LOW 38
Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting,…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.06322 · Published 2013-08-19 · Partial fix · 2.5.10, 2.6.7 +1 CWE-310
Priority LOW 30
The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01756 · Published 2020-03-11 · Partial fix · 1.6.5 CWE-327
