Red Hat Security Advisory

RHSA-2014:0212

Red Hat JBoss SOA Platform 5.3.1 update

Released 2014-02-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss SOA Platform 5.3

Fixes 2 records

TI-2013-03625 CVE-2013-4152 · GHSA-rp4p-g69r-438x

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB…

MEDIUM 52

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial o…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.25634 Published 2014-01-23 Fixed in 3.2.4.RELEASE CWE-264

TI-2013-01939 CVE-2013-2172 · GHSA-r237-w2w6-jq3p

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security…

LOW 29

jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the Canon…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0593 Published 2013-08-20 Partial fix · 1.4.8, 1.5.5 CWE-310