Red Hat Security AdvisoryRHSA-2020:0481
Red Hat JBoss Fuse/A-MQ 6.3 R15 security and bug fix update
Released 2020-02-12 · Red Hat rating Important · View on Red Hat →
Fixes 2 records
Priority MEDIUM 51
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.29726 · Published 2018-01-18 · Partial fix · 1.12.2, 3.0.0 +1 CWE-79
Priority MEDIUM 44
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03089 · Published 2019-11-25 · Partial fix · 8.2.12.Final, 9.4.17.Final CWE-470
