Read the docs
Red Hat Security Advisory

RHSA-2017:1217

Red Hat JBoss BRMS security update

Released 2017-05-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 2 records

TI-2017-05111 CVE-2017-7463 · GHSA-65vp-3wr6-gx6m

Cross-site scripting in Red Hat business-central

Priority LOW 31

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01818 Published 2018-07-27 Fixed CWE-79
TI-2017-01920 CVE-2017-2674 · GHSA-5xrw-c22r-9h93

Improper input validation in Red Hat business-central

Priority LOW 30

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01295 Published 2018-07-27 Fixed CWE-20