Red Hat Security Advisory

RHSA-2019:0364

Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 security update

Released 2019-02-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-activemq-artemis-1.5.5.015-1.redhat_00001.1.ep7.el6, eap7-activemq-artemis-cli-1.5.5.015-1.redhat_00001.1.ep7.el6, eap7-activemq-artemis-commons-1.5.5.015-1.redhat_00001.1.ep7.el6 +47

TI-2018-15986 CVE-2018-1000632 · GHSA-6pcc-3rfx-4gpm

MEDIUM 42

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0657 Published 2018-08-20 Partial fix · 2.0.3, 2.1.1 CWE-91

TI-2018-10505 CVE-2018-14642 · GHSA-vf6r-mmhc-3xcm

LOW 28

An information leak vulnerability was found in Undertow.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02114 Published 2018-09-18 Partial fix · 2.0.19.FINAL CWE-200

TI-2018-07746 CVE-2018-10934 · GHSA-fw7x-p3x6-x9p7

LOW 26

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00947 Published 2019-03-27 Partial fix CWE-79