CVE-2016-6344

概要

参考情報

• rhn.redhat.com/errata/RHSA-2017-0248.html
• rhn.redhat.com/errata/RHSA-2017-0249.html
• securityfocus.com/bid/92714 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking

jboss bpm suite のその他の脆弱性

• CVE-2018-19362緊急 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common…
• CVE-2018-19361緊急 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa clas…
• CVE-2018-19360緊急 9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transp…
• CVE-2016-6343中 5.4JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to …
• CVE-2016-8608中 5.4JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5…