Read the docs
Red Hat Security Advisory

RHSA-2014:0818

Red Hat JBoss BRMS 6.0.2 update

Released 2014-06-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-00102 CVE-2014-0107 · GHSA-rc2w-r4jq-7pfx

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict…

Priority MEDIUM 48

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14066 Published 2014-04-15 Partial fix · 2.7.2 CWE-264
TI-2014-00345 CVE-2014-0364 · GHSA-5xpq-f27x-7pw7

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not…

Priority LOW 32

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06242 Published 2014-04-30 Partial fix CWE-345
TI-2014-00187 CVE-2014-0193 · GHSA-7vpq-g998-qpv7

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before…

Priority LOW 30

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a Tex…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2014-05-06 Partial fix · 3.6.9.Final, 3.7.1.Final +3 CWE-399