Read the docs
Red Hat Security Advisory

RHSA-2015:1177

Red Hat JBoss A-MQ 6.2.0 update

Released 2015-06-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2015-00198 CVE-2015-0226 · GHSA-vjwc-5hfh-2vv5

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about…

Priority MEDIUM 41

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plainte…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05501 Published 2017-10-30 Partial fix · 1.6.17, 2.0.2 CWE-327
TI-2014-02901 CVE-2014-3577 · GHSA-cfh5-3ghh-wfjx

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before…

Priority LOW 38

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.09189 Published 2014-08-21 Partial fix · 4.3.5 CWE-347
TI-2015-01614 CVE-2015-1796 · GHSA-78fq-w796-q537

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java…

Priority LOW 23

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01247 Published 2015-07-08 Partial fix · 2.6.5, 2.4.4 CWE-254