Read the docs
Red Hat Security Advisory

RHSA-2014:0459

Red Hat JBoss Fuse Service Works 6.0.0 security update

Released 2014-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-00048 CVE-2014-0050 · GHSA-xx68-jfcg-xmmf

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat…

Priority HIGH 80

MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a craf…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.83334 Published 2014-03-28 Partial fix · 1.3.1, 8.0.3 +1 CWE-835
TI-2014-00002 CVE-2014-0002 · GHSA-2fw5-rvf2-jq56

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote…

Priority MEDIUM 55

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity decla…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.27389 Published 2014-03-20 Partial fix · 2.11.4, 2.12.3 CWE-264
TI-2013-03752 CVE-2013-4286 · GHSA-j448-j653-r3vj

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP…

Priority MEDIUM 43

Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly handle certain inconsistent HTTP request headers, which allows remote attackers…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.16206 Published 2014-02-26 Partial fix · 6.0.39, 7.0.47 +1 CWE-20