Red Hat Security Advisory

RHSA-2014:1007

Red Hat JBoss BRMS 5.3.1 update

Released 2014-08-05 · Red Hat rating Important · View on Red Hat →

Fixed in

JBoss Enterprise BRMS Platform 5.3

Fixes 2 records

TI-2013-05951 CVE-2013-7285 · GHSA-f554-x222-wgf7

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not…

CRITICAL 90

Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarsh…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84362 Published 2019-05-15 Partial fix · 1.4.7, 1.4.11 CWE-78

TI-2014-00102 CVE-2014-0107 · GHSA-rc2w-r4jq-7pfx

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict…

MEDIUM 48

The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expected restrictions an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14066 Published 2014-04-15 Partial fix · 2.7.2 CWE-264