Red Hat Security Advisory

RHSA-2014:0896

Red Hat JBoss Web Framework Kit 2.6.0 update

Released 2014-07-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Framework Kit 2.6

Fixes 2 records

TI-2013-04991 CVE-2013-5855 · GHSA-3m3r-82gc-53mj

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate…

LOW 28

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04715 Published 2014-07-17 Partial fix · 2.2.6, 2.1.28 CWE-79

TI-2013-01430 CVE-2013-1624 · GHSA-8353-fgcr-xfhx

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library…

LOW 24

The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malform…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02972 Published 2013-02-08 Partial fix · 1.48 CWE-310