What is RHEA-2015:0955?

RHEA-2015:0955 is a security advisory published by Red Hat Product Security with High severity. Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update

Which CVE IDs does RHEA-2015:0955 cover?

RHEA-2015:0955 covers the following CVE IDs: CVE-2015-0204, CVE-2015-0298. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHEA-2015:0955?

RHEA-2015:0955 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

Which products are affected by RHEA-2015:0955?

RHEA-2015:0955 affects 1 product, including: Red Hat JBoss Web Server 3.0.

RHEA-2015:0955HighCVSS 5.3

Red Hat Enhancement Advisory: Red Hat JBoss Web Server 3.0.0 enhancement update

Vendor

Red Hat Product Security

Published

May 13, 2015

Last Modified

November 5, 2026

🔗 CVE IDs covered (2)

CVE-2015-0204 →CVE-2015-0298 →

📋 Description

CVE-2015-0204 — openssl: only allow ephemeral RSA keys in export ciphersuites (FREAK) CVE-2015-0298 — mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

🎯 Affected products1

Red Hat JBoss Web Server 3.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied and back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (3)

selfhttps://access.redhat.com/errata/RHEA-2015:0955
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1164678
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2015/rhea-2015_0955.json