Red Hat Security Advisory

RHSA-2014:0454

Red Hat JBoss Enterprise Application Platform 6.2.2 security update

Released 2014-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.2

Fixes 1 record

TI-2014-00102 CVE-2014-0107 · GHSA-rc2w-r4jq-7pfx

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict…

MEDIUM 48

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14066 Published 2014-04-15 Partial fix · 2.7.2 CWE-264