Red Hat Security Advisory

RHSA-2020:2563

EAP Continuous Delivery Technical Preview Release 14 security update

Released 2020-06-15 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2017-05113 CVE-2017-7465 · GHSA-x996-h3mp-c4p4

MEDIUM 47

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02833 Published 2018-06-27 Partial fix CWE-611

TI-2017-05146 CVE-2017-7503 · GHSA-2f38-5w6m-7c6f

MEDIUM 46

It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02007 Published 2017-05-18 Partial fix CWE-611