PT-2015-5457

Name of the Vulnerable Software and Affected Versions Red Hat JBoss BPM Suite versions prior to 6.1.2 Description The issue is related to an XML external entity XXE vulnerability in the dashbuilder import facility. This vulnerability allows remote attackers to read arbitrary files, conduct...

CVE-2015-1818: Undefined Security Weakness

XML external entity XXE vulnerability in the dashbuilder import facility DocumentBuilders in org.jboss.dashboard.export.ImportManagerImpl in Red Hat JBoss BPM Suite before 6.1.2 allows remote attackers to read arbitrary files, conduct server-side request forgery SSRF attacks, and have other...