CVE-2014-3518

The CVE-2014-3518 vulnerability affects jmx-remoting.sar in JBoss Remoting, used by Red Hat JBoss EAP 5.2.x and related Red Hat platforms (JEAP 5.2.0, BRMS 5.3.1, Portal Platform 5.2.2, SOA Platform 5.3.1). The root cause is incomplete implementation of the JSR 160 JMX remoting specification, all...

Xxe

org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform JEAP before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity XXE issue...

CVE-2014-3481

CVE-2014-3481 is an XXE information-disclosure flaw in Red Hat JBoss Enterprise Application Platform 6.x's JAX-RS/RESTEasy stack (enabled external entity processing). Affected: JEAP 6.x prior to 6.2.4. Impact: read arbitrary files. Remediation: upgrade to Red Hat JBoss EAP 6.2.4 (or equivalent se...

CVE-2014-3481: Exposure of Sensitive Information to an Unauthorized Actor

org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform JEAP before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity XXE issue...