Red Hat Security Advisory

RHSA-2020:3678

Red Hat Process Automation Manager 7.8.1 Security Update

Released 2020-09-08 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2020-01659 CVE-2020-1714 · GHSA-m6mm-q862-j366

MEDIUM 43

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02604 Published 2020-05-13 Partial fix · 11.0.0 CWE-20

TI-2020-10739 CVE-2020-13692 · GHSA-88cc-g835-76rp

MEDIUM 41

PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.04094 Published 2020-06-04 Partial fix · 42.2.13 CWE-611