Read the docs
Red Hat Security Advisory

RHSA-2015:0773

Red Hat JBoss Data Grid 6.4.1 update

Released 2015-04-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

Priority MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112
TI-2015-00198 CVE-2015-0226 · GHSA-vjwc-5hfh-2vv5

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about…

Priority MEDIUM 41

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plainte…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05501 Published 2017-10-30 Partial fix · 1.6.17, 2.0.2 CWE-327
TI-2014-06512 CVE-2014-7839 · GHSA-pc54-pchm-xcw6

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1)…

Priority LOW 32

DocumentProvider in RESTEasy 2.3.7 and 3.0.9 does not configure the (1) external-general-entities or (2) external-parameter-entities features, which allows remote attackers to conduct XML external entity (XXE) attacks vi…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01955 Published 2014-11-25 Partial fix · 3.0.11.Final CWE-20