Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 | jboss-ec2-eap | 0:7.5.6-1.Final_redhat_1.ep6.el6 |
| Red Hat · JBoss EAP 6 jboss_enterprise_application_platform:6::el6 | jboss-ec2-eap-samples | 0:7.5.6-1.Final_redhat_1.ep6.el6 |
Vulnerabilities 1
-
High —CVE-2015-0254 EPSS 12%
XXE in Apache Standard Taglibs
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/documentation/en-US/JBoss_Enterprise_Application_Platform/6.4/index.html
-
article
https://access.redhat.com/solutions/1584363
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1198606
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0124.json
-
report
https://access.redhat.com/security/cve/CVE-2015-0254
-
advisory
https://www.cve.org/CVERecord?id=CVE-2015-0254
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2015-0254