Red Hat Security Advisory

RHSA-2015:2558

Red Hat JBoss Fuse Service Works 6.2.1 update

Released 2015-12-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Fuse Service Works 6.2

Fixes 3 records

TI-2015-02881 CVE-2015-3253 · GHSA-qg25-hgjv-cg9q

The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through…

HIGH 70

The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.41032 Published 2015-08-13 Partial fix · 2.4.4 CWE-74

TI-2015-00231 CVE-2015-0264 · GHSA-mhx2-r3jx-g94c

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in…

LOW 33

Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allow remote attackers to read arbitrary files via an external entity in an inval…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07098 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2

TI-2015-00230 CVE-2015-0263 · GHSA-3hrc-f439-727g

XML external entity (XXE) vulnerability in the XML converter setup in…

LOW 33

XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an externa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07474 Published 2015-06-03 Partial fix · 2.13.4, 2.14.2 CWE-611