Read the docs
Red Hat Security Advisory

RHSA-2018:0319

Red Hat JBoss Fuse/A-MQ 6.3 R6 security and bug fix update

Released 2018-02-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2017-09359 CVE-2017-12634 · GHSA-vf4q-8mr7-5c5c

Deserialization of untrusted data in Apache Camel

Priority MEDIUM 52

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07194 Published 2017-11-15 Partial fix · 2.19.4, 2.20.1 CWE-502
TI-2017-09358 CVE-2017-12633 · GHSA-5whj-523x-6j68

Deserialization of untrusted data in Apache Camel

Priority MEDIUM 52

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07194 Published 2017-11-15 Partial fix · 2.19.4, 2.20.1 CWE-502
TI-2017-05623 CVE-2017-8028 · GHSA-pjqh-2jcc-5j84

Improper authentication in Spring-LDAP Spring-LDAP versions 1.3.0 2.3.1

Priority MEDIUM 40

In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirC…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.02606 Published 2017-11-27 Partial fix · 2.3.2 CWE-287
TI-2017-03662 CVE-2017-5662 · GHSA-qwgx-59jw-qfg9

XML external entity injection in Apache Batik

Priority LOW 39

In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files.

CVSS 3.0HIGH 7.3 Network Low privileges User interaction EPSS 0.04118 Published 2017-04-18 Partial fix · 1.9 CWE-611
TI-2017-01868 CVE-2017-2617 · GHSA-3pgx-46rx-xc9j

Improper input validation in [UNKNOWN] hawtio

Priority LOW 37

hawtio before version 1.5.5 is vulnerable to remote code execution via file upload.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01653 Published 2018-05-22 Partial fix CWE-20