ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +224 more potentially affected by CVE-2013-4152 via org.springframework:spring-oxm (>=3.0.0.release, <=3.2.3.release)

org.springframework:spring-oxm MAVEN version =3.0.0.release, =2.6.20, =1.0-release, =0.9.3, =0.9.3, =0.9.3, =0.9.8, =0.9.3, =0.8.0, =0.8.0, =0.8.0, =1.0.1-release and more Source cves: CVE-2013-4152 Source advisory: GHSA-RP4P-G69R-438X...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +224 more potentially affected by CVE-2013-7315 via org.springframework:spring-oxm (>=3.0.0.release, <=3.2.3.release)

org.springframework:spring-oxm MAVEN version =3.0.0.release, =2.6.20, =1.0-release, =0.9.3, =0.9.3, =0.9.3, =0.9.8, =0.9.3, =0.8.0, =0.8.0, =0.8.0, =1.0.1-release and more Source cves: CVE-2013-7315 Source advisory: GHSA-VP63-RRCM-9MPH...

ch.hsr.mas.oms-financialanalyzer:indicators (1.2.0), ch.hsr.mas.oms-financialanalyzer:oms-api (1.2.0) +224 more potentially affected by CVE-2013-4152 via org.springframework:spring-oxm (>=3.0.0.release, <=3.2.3.release)

org.springframework:spring-oxm MAVEN version =3.0.0.release, =2.6.20, =1.0-release, =0.9.3, =0.9.3, =0.9.3, =0.9.8, =0.9.3, =0.8.0, =0.8.0, =0.8.0, =1.0.1-release and more Source cves: CVE-2013-4152 Source advisory: OSV:GHSA-RP4P-G69R-438X...

org.springframework.ws:spring-oxm (1.5.3), org.springframework.ws:spring-oxm-tiger (1.5.3) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.3)

org.springframework.ws:spring-xml MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.3 - org.springframework.ws:spring-oxm-tiger 1.5.3 -...

org.springframework.ws:spring-oxm (1.5.10), org.springframework.ws:spring-oxm-tiger (1.5.10) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.10)

org.springframework.ws:spring-xml MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.10 - org.springframework.ws:spring-oxm-tiger 1.5.10 -...

org.springframework.ws:spring-oxm (1.0-m3), org.springframework.ws:spring-oxm-tiger (1.0-m3) +1 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0-m3)

org.springframework.ws:spring-xml MAVEN version 1.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0-m3 - org.springframework.ws:spring-oxm-tiger 1.0-m3 -...

org.springframework.ws:spring-oxm (1.0-m2), org.springframework.ws:spring-oxm-tiger (1.0-m2) +1 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0-m2)

org.springframework.ws:spring-xml MAVEN version 1.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0-m2 - org.springframework.ws:spring-oxm-tiger 1.0-m2 -...

org.springframework.integration:spring-integration-samples (>=1.0.1.release, <=1.0.2.sr1), org.springframework.integration:spring-integration-ws (>=1.0.1.release, <=1.0.3.release) +6 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.5)

org.springframework.ws:spring-xml MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.integration:spring-integration-samples =1.0.1.release, =1.0.1.release,...

org.springframework.ws:spring-oxm (1.0-rc2), org.springframework.ws:spring-oxm-tiger (1.0-rc2) +2 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0-rc2)

org.springframework.ws:spring-xml MAVEN version 1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0-rc2 - org.springframework.ws:spring-oxm-tiger 1.0-rc2...

org.springframework.ws:spring-oxm (1.0.0), org.springframework.ws:spring-oxm-tiger (1.0.0) +2 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0.0)

org.springframework.ws:spring-xml MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0.0 - org.springframework.ws:spring-oxm-tiger 1.0.0 -...

org.springframework.ws:spring-oxm (1.5.0), org.springframework.ws:spring-oxm-tiger (1.5.0) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.0)

org.springframework.ws:spring-xml MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.0 - org.springframework.ws:spring-oxm-tiger 1.5.0 -...

org.springframework.ws:spring-oxm (1.5.4), org.springframework.ws:spring-oxm-tiger (1.5.4) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.4)

org.springframework.ws:spring-xml MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.4 - org.springframework.ws:spring-oxm-tiger 1.5.4 -...

org.springframework.ws:spring-oxm (1.0.1), org.springframework.ws:spring-oxm-tiger (1.0.1) +2 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0.1)

org.springframework.ws:spring-xml MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0.1 - org.springframework.ws:spring-oxm-tiger 1.0.1 -...

org.springframework.ws:spring-oxm (1.0.2), org.springframework.ws:spring-oxm-tiger (1.0.2) +2 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0.2)

org.springframework.ws:spring-xml MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0.2 - org.springframework.ws:spring-oxm-tiger 1.0.2 -...

org.springframework.ws:spring-oxm (1.5.1), org.springframework.ws:spring-oxm-tiger (1.5.1) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.1)

org.springframework.ws:spring-xml MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.1 - org.springframework.ws:spring-oxm-tiger 1.5.1 -...

org.springframework.ws:spring-oxm (1.5.2), org.springframework.ws:spring-oxm-tiger (1.5.2) +3 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.2)

org.springframework.ws:spring-xml MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.5.2 - org.springframework.ws:spring-oxm-tiger 1.5.2 -...

org.springframework.ws:spring-oxm (1.0.3), org.springframework.ws:spring-oxm-tiger (1.0.3) +2 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.0.3)

org.springframework.ws:spring-xml MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - org.springframework.ws:spring-oxm 1.0.3 - org.springframework.ws:spring-oxm-tiger 1.0.3 -...

net.javacrumbs:spring-ws-test (>=0.3, <=0.16), org.springframework.ws:spring-oxm (1.5.7) +4 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (1.5.7)

org.springframework.ws:spring-xml MAVEN version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.ws:spring-xml and may be impacted: - net.javacrumbs:spring-ws-test =0.3, =0.16 - org.springframework.ws:spring-oxm 1.5.7 -...

RHEL 6 : activemq (RHSA-2014:0254)

An updated activemq package that fixes multiple security issues is now available for Red Hat OpenShift Enterprise 1.2.7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Framework: XML External Entity (XXE) injection flaw

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in...