Red Hat Security Advisory

RHSA-2015:1041

Red Hat JBoss Fuse/A-MQ 6.1.0 update

Released 2015-06-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss A-MQ 6.1
Red Hat JBoss Fuse 6.1

Fixes 2 records

TI-2015-00231 CVE-2015-0264 · GHSA-mhx2-r3jx-g94c

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in…

LOW 33

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an inval…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07098 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2

TI-2015-00230 CVE-2015-0263 · GHSA-3hrc-f439-727g

XML external entity (XXE) vulnerability in the XML converter setup in…

LOW 33

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an externa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07474 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2 CWE-611