Read the docs
Red Hat Security Advisory

RHSA-2015:1539

Red Hat JBoss BPM Suite 6.1.2 update

Released 2015-08-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2015-01635 CVE-2015-1818 · GHSA-c64m-pjpp-mqqj

XML external entity (XXE) vulnerability in the dashbuilder import facility…

Priority LOW 37

XML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl) in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitr…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02244 Published 2015-08-11 Fixed
TI-2015-00231 CVE-2015-0264 · GHSA-mhx2-r3jx-g94c

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in…

Priority LOW 33

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an inval…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07098 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2
TI-2015-00230 CVE-2015-0263 · GHSA-3hrc-f439-727g

XML external entity (XXE) vulnerability in the XML converter setup in…

Priority LOW 33

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an externa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07474 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2 CWE-611