Read the docs
Red Hat Security Advisory

RHSA-2020:5344

Red Hat JBoss Enterprise Application Platform 7.3.4 security update

Released 2020-12-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq

XML external entity injection in jackson-databind

Priority MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611
TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

SQL injection in hibernate-core

Priority MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89
TI-2020-15661 CVE-2020-25644 · GHSA-hxj4-885f-grgp

Memory leak in wildfly-openssl

Priority LOW 37

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02365 Published 2020-10-06 Partial fix · 1.1.3.Final CWE-401