Read the docs
Red Hat Security Advisory

RHSA-2014:0842

Red Hat JBoss Enterprise Application Platform 6.2.4 security update

Released 2014-07-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-00070 CVE-2014-0075 · GHSA-475f-74wp-pqv5

Integer overflow in the parseChunkHeader function in…

Priority MEDIUM 46

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.17577 Published 2014-05-31 Partial fix · 6.0.40, 7.0.53 +1 CWE-189
TI-2014-00094 CVE-2014-0099 · GHSA-xh5x-j8jf-pcpx

Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before…

Priority LOW 37

Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP reques…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08838 Published 2014-05-31 Partial fix · 6.0.40, 7.0.54 +1 CWE-189
TI-2014-00113 CVE-2014-0119 · GHSA-prc3-7f44-w48j

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly…

Priority LOW 36

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07616 Published 2014-05-31 Partial fix · 6.0.40, 7.0.54 +1 CWE-264
TI-2014-00091 CVE-2014-0096 · GHSA-qprx-q2r7-3rx6

java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache…

Priority LOW 36

java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attack…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06905 Published 2014-05-31 Partial fix · 6.0.40, 7.0.54 +1 CWE-264