Red Hat Security Advisory

RHSA-2013:1147

Red Hat JBoss SOA Platform 5.3.1 update

Released 2013-08-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss SOA Platform 5.3

Fixes 3 records

TI-2013-00203 CVE-2013-0269 · GHSA-x457-cw4h-hq5f

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows…

MEDIUM 48

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13911 Published 2013-02-13 Partial fix · 1.5.5, 1.6.8 +1 CWE-20

TI-2012-04824 CVE-2012-5783 · GHSA-3832-9276-x7gf

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant…

LOW 38

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09254 Published 2012-11-04 Partial fix CWE-295

TI-2013-01606 CVE-2013-1821 · GHSA-hgg7-cghq-xhf4

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers…

LOW 33

lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06857 Published 2013-04-09 Partial fix · 1.7.3 CWE-20