Read the docs
Red Hat Security Advisory

RHSA-2014:1725

Red Hat JBoss Enterprise Application Platform 5.2.0 security update

Released 2014-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 31

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08863 Published 2014-01-11 Partial fix · 1.5.6 CWE-399