Security Bulletin: Multiple vulnerabilities in Apache Camel core affect IBM Application Performance Management products

Summary Apache Camel core is used by IBM Application Performance Management. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by an error in t...

com.consol.citrus:citrus-camel (=2.2), com.github.oscerd:camel-cassandra (>=1.0.0 <=1.1.0) +390 more potentially affected by CVE-2015-0263 via org.apache.camel:camel-core (>=2.14.0 <=2.14.1)

org.apache.camel:camel-core MAVEN version =2.14.0, =1.0.0, =0.0.13, =0.0.9, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.4 and more Source cves: CVE-2015-0263 Source advisory: OSV:GHSA-3HRC-F439-727G...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse Service Works 6.2.1 update

Red Hat JBoss Fuse Service Works 6.2.1, which fixes three security issues and various bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Moderate: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.1.2 update

Red Hat JBoss BPM Suite 6.1.2, which fixes three security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores...

CVE-2015-0263

XML external entity XXE vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource...

CVE-2015-0263

Apache Camel contains an XXE in the XML converter setup (converter/jaxp/XmlConverter.java) affecting versions before 2.13.4 and 2.14.x before 2.14.2, allowing remote attackers to read arbitrary files via an external entity in SAXSource. Remediation: upgrade to Camel 2.13.4+ or 2.14.2+. Exploitati...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 update

Red Hat JBoss Fuse and A-MQ 6.1.0 Patch 4 on Rollup Patch 2 R2P4, which fixes two security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerabilit...