Read the docs
Red Hat Security Advisory

RHSA-2016:2822

Red Hat JBoss BPM Suite security update

Released 2016-11-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2016-03109 CVE-2016-3674 · GHSA-rgh3-987h-wpmw

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver…

Priority MEDIUM 50

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08179 Published 2016-05-17 Partial fix · 1.4.9 CWE-200
TI-2016-06052 CVE-2016-7041 · GHSA-h463-ph72-3qqf

Path traversal in Red Hat Drools Workbench

Priority LOW 36

Drools Workbench contains a path traversal vulnerability.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03956 Published 2018-09-10 Partial fix CWE-22
TI-2016-07070 CVE-2016-8608 · GHSA-9vxf-m4pg-2r4f

Cross-site scripting in Red Hat BRMS

Priority LOW 27

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01259 Published 2018-08-01 Partial fix CWE-79