CVE-2016-5398

Description

References

• rhn.redhat.com/errata/RHSA-2016-1968.html · Vendor Advisory
• rhn.redhat.com/errata/RHSA-2016-1969.html · Vendor Advisory
• securityfocus.com/bid/93219 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

More vulnerabilities in jboss bpm suite

• CVE-2018-19362CRITICAL 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common…
• CVE-2018-19361CRITICAL 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa clas…
• CVE-2018-19360CRITICAL 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transp…
• CVE-2016-6343MEDIUM 5.4JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to …
• CVE-2016-8608MEDIUM 5.4JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5…