Red Hat Security Advisory

RHSA-2021:0600

Red Hat Process Automation Manager 7.10.0 security update

Released 2021-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

RHPAM 7.10.0

Fixes 2 records

TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

SQL injection in hibernate-core

MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89

TI-2020-11209 CVE-2020-14338 · GHSA-w4jq-qh47-hvjq

Improper input validation in Wildfly

LOW 27

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01292 Published 2020-09-17 Partial fix · 2.12.0.sp3 CWE-20