Skip to content
OpenAdvisories
Medium WID-SEC-2023-1601 3 CVEs

Red Hat JBoss Enterprise SOA Platform: Mehrere Schwachstellen

Published Aug 8, 2013 · Updated Jun 29, 2023 · Revision 9 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: JBoss Enterprise Application Platform Product: JBoss Enterprise Application Platform 6 EL5 Product: JBoss Enterprise Application Platform 6 EL6 Product: JBoss Enterprise SOA Platform 5.3.1 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise SOA Platform ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen zu manipulieren oder um einen Denial of Service Angriff durchzuführen.

Product

JBoss Enterprise SOA Platform ist eine Infrastruktur zur Automatisierung von ESB und Businessprozessen.

Vulnerabilities 3

  • Medium —
    CVE-2012-5783

    Improper Certificate Validation in Apache Commons HttpClient

    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

    trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Wolfi Maven
  • High —
    CVE-2013-0269 Public exploit EPSS 14%

    JSON gem has Improper Input Validation vulnerability

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…

    json ruby-json Debian RubyGems
  • Medium —
    CVE-2013-1821

    Ruby vulnerable to denial of service

    lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

    org.jruby:jruby Maven

Revision history

  1. #9

    Neue Updates von Red Hat aufgenommen

  2. #8

    New remediations available

  3. #6

    New remediations available

  4. #7

    Version nicht vorhanden

  5. #5

    New remediations available

  6. #4

    New remediations available

  7. #3

    New remediations available

  8. #1

    Initial Release

  9. #2

    Version nicht vorhanden

References