Read the docs
Red Hat Security Advisory

RHSA-2021:0603

Red Hat Decision Manager 7.10.0 security update

Released 2021-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj

Improper input validation in Apache HttpClient

Priority MEDIUM 42

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.09032 Published 2020-12-02 Partial fix · 4.5.13, 5.0.3 CWE-20
TI-2020-15656 CVE-2020-25638 · GHSA-j8jw-g6fq-mp7h

SQL injection in hibernate-core

Priority MEDIUM 40

A flaw was found in hibernate-core in versions prior to and including 5.4.23.Final.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02929 Published 2020-12-02 Partial fix · 5.4.24.Final, 5.3.20.Final CWE-89
TI-2020-07597 CVE-2020-9488 · GHSA-vwqq-5vrc-xw9h

Improper certificate validation in Apache Log4j

Priority LOW 29

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.08216 Published 2020-04-27 Partial fix · 2.12.3, 2.13.2 +1 CWE-295
TI-2020-11209 CVE-2020-14338 · GHSA-w4jq-qh47-hvjq

Improper input validation in Wildfly

Priority LOW 27

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01292 Published 2020-09-17 Partial fix · 2.12.0.sp3 CWE-20