Red Hat Security AdvisoryRHSA-2016:1135
Red Hat JBoss Data Virtualization security and bug fix update
Released 2016-05-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Data Virtualization 6.2
Fixes 2 records
Priority HIGH 73
BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Hand…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.70425 · Published 2016-04-07 · Partial fix · 2.0b6 CWE-19
Priority LOW 32
HSLFSlideShow in Apache POI before 3.11 allows remote attackers to cause a denial of service (infinite loop and deadlock) via a crafted PPT file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0663 · Published 2015-01-06 · Partial fix · 3.11 CWE-399
