Red Hat Security Advisory

RHSA-2016:0124

jboss-ec2-eap security and enhancement update for EAP 6.4.6

Released 2016-02-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server jboss-ec2-eap-7.5.6-1.Final_redhat_1.ep6.el6, jboss-ec2-eap-samples-7.5.6-1.Final_redhat_1.ep6.el6

Fixes 1 record

TI-2015-00223 CVE-2015-0254 · GHSA-6x4w-8w53-xrvv

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or…

MEDIUM 55

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.1204 Published 2015-03-09 Partial fix · 1.2.3 CWE-611