Red Hat Security Advisory

RHSA-2014:0590

Red Hat JBoss Enterprise Application Platform 5.2.0 security update

Released 2014-06-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 5.2

Fixes 1 record

TI-2014-00102 CVE-2014-0107 · GHSA-rc2w-r4jq-7pfx

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict…

MEDIUM 48

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14066 Published 2014-04-15 Partial fix · 2.7.2 CWE-264