Read the docs
Red Hat Security Advisory

RHSA-2016:1593

Red Hat JBoss BPM Suite 6.3.2 security and bug fix update

Released 2016-08-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 30

Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumptio…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02555 Published 2016-07-12 Partial fix · 3.2.14, 4.1.7 +1 CWE-119