Critical: Red Hat Security Advisory: Red Hat FIS 2.0 on Fuse 6.3.0 R8 security and bug fix update

🗓️ 17 Oct 2018 19:28:22Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 210 Views

Red Hat FIS 2.0 on Fuse 6.3.0 R8 security update for critical vulnerabilitie

Reporter	Title	Published	Views	Family All 1022
zdt	Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass Exploit	4 Oct 201700:00	–	zdt
zdt	Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - Remote Code Execution Exp	9 Oct 201700:00	–	zdt
zdt	Apache Tomcat JSP Upload Bypass Remote Code Execution Exploit	12 Oct 201700:00	–	zdt
zdt	Apache Struts2 S2-055 DoS Vulnerability	2 Dec 201700:00	–	zdt
zdt	Pivotal Spring Java Framework < 5.0 - Remote Code Execution Exploit	29 May 201800:00	–	zdt
vulnersOsv	ai.snips:play-mongo-bson_2.12 (>=0.5 <=0.5.1), al.bluecryst:bluecrystal (>=2.3.0 <=2.3.4) +5075 more potentially affected by CVE-2017-7525 +1 more via com.fasterxml.jackson.core:jackson-databind (>=2.8.0 <=2.8.11.1)	16 Jul 201917:42	–	vulnersosv
vulnersOsv	ca.uhn.hapi.fhir:hapi-fhir-cli-api (=3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.1.0 <=3.4.0) +463 more potentially affected by CVE-2018-1275 via org.springframework:spring-messaging (>=5.0.0.RELEASE <=5.0.4.RELEASE)	17 Oct 201820:28	–	vulnersosv
vulnersOsv	am.ik.home:uaa-client (>=1.0.0 <=1.9.0), am.ik.home:uaa-integration-test (>=1.0.0 <=1.9.0) +509 more potentially affected by CVE-2018-1260 via org.springframework.security.oauth:spring-security-oauth2 (>=2.0.0.RELEASE <=2.0.14.RELEASE)	18 Oct 201818:05	–	vulnersosv
vulnersOsv	ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.databand:dbnd-agent (>=0.42.1 <=0.80.6) +5568 more potentially affected by CVE-2018-7489 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0 <=2.7.9.2)	16 Oct 201817:45	–	vulnersosv
vulnersOsv	at.chrl:chrl-jms (=1.1.0), ca.islandora.alpaca:islandora-connector-broadcast (>=0.2.0 <=0.3.0) +1574 more potentially affected by CVE-2018-1270 via org.springframework:spring-messaging (>=4.0.1.RELEASE <=4.3.15.RELEASE)	17 Oct 201820:05	–	vulnersosv

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

04 Aug 2026 20:58Current

7.7High risk

Vulners AI Score7.7

CVSS 27.5

CVSS 3.18.1 - 9.8

CVSS 39.8

EPSS0.99988

SSVC

red hat fuse integration services containerized xpaas openshift security fix cve-2017-7525 cve-2018-7489 cve-2018-1270 cve-2018-1275 cve-2018-1271 cve-2018-1260 cve-2018-1336 cve-2018-1304 cve-2018-1305 cve-2017-12617 cvss score references unix