Read the docs
Red Hat Security Advisory

RHSA-2015:2560

Red Hat JBoss BPM Suite 6.2.0 update

Released 2015-12-07 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 3 records

Priority HIGH 84

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Ope…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.85562 Published 2017-11-09 Partial fix · 3.2.2, 4.1 CWE-502
Priority MEDIUM 45

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG f…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.16564 Published 2015-03-24 Partial fix · 1.8 CWE-20