Read the docs
Red Hat Security Advisory

RHSA-2014:0910

Red Hat JBoss Operations Network 3.2.2 update

Released 2014-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2014-02856 CVE-2014-3530 · GHSA-2c9q-qwrc-f486

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in…

Priority LOW 39

The org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory method in PicketLink, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 5.2.0 and 6.2.4, expands entity references, which allows remote…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03857 Published 2014-07-22 Partial fix · 2.7.0.Final CWE-200
TI-2014-00187 CVE-2014-0193 · GHSA-7vpq-g998-qpv7

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before…

Priority LOW 30

WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a Tex…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04326 Published 2014-05-06 Partial fix · 3.6.9.Final, 3.7.1.Final +3 CWE-399
TI-2013-04991 CVE-2013-5855 · GHSA-3m3r-82gc-53mj

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate…

Priority LOW 28

Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04715 Published 2014-07-17 Partial fix · 2.2.6, 2.1.28 CWE-79