Skip to content
OpenAdvisories
High RHSA-2019:0364 3 CVEs

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 security update

Published Sep 13, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 76

ReleasePackageFixed in
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-cli 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-commons 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-core-client 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-dto 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hornetq-protocol 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-hqclient-protocol 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jdbc-store 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-client 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-jms-server 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-journal 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-native 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-ra 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-selector 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-server 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-activemq-artemis-service-extensions 0:1.5.5.015-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-apache-cxf 0:3.1.16-2.redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-apache-cxf-rt 0:3.1.16-2.redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-apache-cxf-services 0:3.1.16-2.redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-apache-cxf-tools 0:3.1.16-2.redhat_2.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-dom4j 0:2.1.1-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-core 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-entitymanager 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-envers 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-infinispan 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-hibernate-java8 0:5.1.17-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-api 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-impl 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-common-spi 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-api 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-core-impl 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-deployers-common 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-jdbc 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-ironjacamar-validator 0:1.4.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jackson-databind 0:2.8.11.3-1.redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jandex 0:2.0.5-1.Final_redhat_1.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jberet 0:1.2.7-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jberet-core 0:1.2.7-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-ejb-client 0:4.0.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-el-api_3.0_spec 0:1.0.13-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-logmanager 0:2.0.11-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-modules 0:1.6.7-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jboss-security-negotiation 0:3.0.5-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-jbossws-common 0:3.1.7-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-compensations 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jbosstxbridge 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jbossxts 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jts-idlj 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-jts-integration 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-api 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-bridge 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-integration 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-restat-util 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-narayana-txframework 0:5.5.34-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-api 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-bindings 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-common 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-config 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-federation 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-api 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-impl 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-idm-simple-schema 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-impl 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-picketlink-wildfly8 0:2.5.5-15.SP12_redhat_3.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow 0:1.4.18-10.SP11_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-undertow-jastow 0:2.0.7-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly 0:7.1.6-4.GA_redhat_00002.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-common 0:1.2.1-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron 0:1.1.12-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-elytron-tool 0:1.0.9-1.Final_redhat_00001.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-javadocs 0:7.1.6-2.GA_redhat_00002.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-modules 0:7.1.6-4.GA_redhat_00002.1.ep7.el6
Red Hat · JBoss EAP 7 jboss_enterprise_application_platform:7::el6 eap7-wildfly-web-console-eap 0:2.9.19-1.Final_redhat_00001.1.ep7.el6

Vulnerabilities 3

  • High 7.5
    CVE-2018-1000632

    Dom4j contains a XML Injection vulnerability

    dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable vi…

    dom4j dom4j org.dom4j:dom4j dom4j:dom4j Debian Ubuntu Maven
  • Medium 5.4
    CVE-2018-10934

    A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.G…

    Red Hat wildfly-core
  • Medium 5.3
    CVE-2018-14642

    Exposure of Sensitive Information to an Unauthorized Actor in Undertow

    An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data fro…

    Red Hat undertow undertow undertow Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/?version=7.1
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1615673
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1620529
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1628702
  • article
    https://issues.redhat.com/browse/JBEAP-15311
  • article
    https://issues.redhat.com/browse/JBEAP-15370
  • article
    https://issues.redhat.com/browse/JBEAP-15373
  • article
    https://issues.redhat.com/browse/JBEAP-15440
  • article
    https://issues.redhat.com/browse/JBEAP-15443
  • article
    https://issues.redhat.com/browse/JBEAP-15444
  • article
    https://issues.redhat.com/browse/JBEAP-15461
  • article
    https://issues.redhat.com/browse/JBEAP-15482
  • article
    https://issues.redhat.com/browse/JBEAP-15483
  • article
    https://issues.redhat.com/browse/JBEAP-15525
  • article
    https://issues.redhat.com/browse/JBEAP-15528
  • article
    https://issues.redhat.com/browse/JBEAP-15545
  • article
    https://issues.redhat.com/browse/JBEAP-15619
  • article
    https://issues.redhat.com/browse/JBEAP-15627
  • article
    https://issues.redhat.com/browse/JBEAP-15747
  • article
    https://issues.redhat.com/browse/JBEAP-15842
  • article
    https://issues.redhat.com/browse/JBEAP-15852
  • article
    https://issues.redhat.com/browse/JBEAP-15891
  • article
    https://issues.redhat.com/browse/JBEAP-16015
  • article
    https://issues.redhat.com/browse/JBEAP-9658
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0364.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-10934
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-10934
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-10934
  • report
    https://access.redhat.com/security/cve/CVE-2018-14642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-14642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-14642
  • report
    https://access.redhat.com/security/cve/CVE-2018-1000632
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1000632
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1000632