Read the docs
Red Hat Security Advisory

RHSA-2016:0042

Red Hat JBoss BPM Suite 6.1.5 update

Released 2016-01-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority MEDIUM 45

XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG f…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.16564 Published 2015-03-24 Partial fix · 1.8 CWE-20