Red Hat Security AdvisoryRHSA-2016:0123
Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 7
Released 2016-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server apache-cxf-2.7.18-1.redhat_1.1.ep6.el7, hibernate4-core-eap6-4.2.22-1.Final_redhat_1.1.ep6.el7, hibernate4-eap6-4.2.22-1.Final_redhat_1.1.ep6.el7 +47
Fixes 1 record
Priority MEDIUM 55
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1204 · Published 2015-03-09 · Partial fix · 1.2.3 CWE-611
