Red Hat Security AdvisoryRHSA-2016:0121
Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 5
Released 2016-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Server apache-cxf-2.7.18-1.redhat_1.1.ep6.el5, hibernate4-core-eap6-4.2.22-1.Final_redhat_1.1.ep6.el5, hibernate4-eap6-4.2.22-1.Final_redhat_1.1.ep6.el5 +47
Fixes 1 record
Priority MEDIUM 55
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1204 · Published 2015-03-09 · Partial fix · 1.2.3 CWE-611
