Red Hat Security Advisory

RHSA-2014:0323

Red Hat JBoss Fuse/A-MQ 6.0.0 security update

Released 2014-03-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.0
Red Hat JBoss Fuse 6.0

Fixes 3 records

TI-2013-05951 CVE-2013-7285 · GHSA-f554-x222-wgf7

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not…

CRITICAL 90

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarsh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84362 Published 2019-05-15 Partial fix · 1.4.7, 1.4.11 CWE-78

TI-2014-00002 CVE-2014-0002 · GHSA-2fw5-rvf2-jq56

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote…

MEDIUM 55

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity decla…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.27389 Published 2014-03-20 Partial fix · 2.11.4, 2.12.3 CWE-264

TI-2014-00003 CVE-2014-0003 · GHSA-h6rp-8v4j-hwph

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and…

MEDIUM 43

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07492 Published 2014-03-20 Fixed in 2.11.4, 2.12.3 CWE-264