Read the docs
Red Hat Security Advisory

RHSA-2013:1862

Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

Released 2013-12-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 45

The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain crafted OpenJPA objects,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09511 Published 2013-07-11 Fixed in 1.2.3, 2.2.2 CWE-264
Priority MEDIUM 41

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08492 Published 2013-10-04 Fixed in 2.9.7, 2.10.7 +2 CWE-94