Skip to content
OpenAdvisories
Unscored RHSA-2014:1728 1 CVE

Red Hat Security Advisory: Red Hat JBoss Enterprise Web Platform 5.2.0 security update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el5 xml-security 0:1.5.6-3.ep5.el5
Red Hat · JBoss Web Platform 5 jboss_enterprise_web_platform:5::el6 xml-security 0:1.5.6-3.el6

Vulnerabilities 1

  • Medium —
    CVE-2013-4517

    Improper Input Validation in Apache Santuario XML Security

    Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.

    org.apache.santuario:xmlsec libxml-security-java Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1045257
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1728.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4517
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4517