Red Hat Security Advisory

RHSA-2014:0045

Red Hat JBoss Web Framework Kit 2.4.0 update

Released 2014-01-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Framework Kit 2.4

Fixes 2 records

TI-2013-05400 CVE-2013-6447 · GHSA-gvc5-hqc3-j65q

Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2)…

LOW 28

Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss We…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02674 Published 2014-01-23 Partial fix CWE-200

TI-2013-05401 CVE-2013-6448 · GHSA-4vqm-j4g4-5vv7

The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and…

LOW 26

The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain inf…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01431 Published 2014-01-23 Partial fix CWE-264