What is RHSA-2013:1265?

RHSA-2013:1265 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: jbossweb security update

Which CVE IDs does RHSA-2013:1265 cover?

RHSA-2013:1265 covers the following CVE IDs: CVE-2013-2185. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2013:1265?

RHSA-2013:1265 affects 1 product, including: Red Hat JBoss Portal Platform 6.0.

RHSA-2013:1265High

Red Hat Security Advisory: jbossweb security update

Vendor

Red Hat Product Security

Published

September 16, 2013

Last Modified

November 7, 2026

🔗 CVE IDs covered (1)

CVE-2013-2185 →

📋 Description

CVE-2013-2185 — Tomcat/JBossWeb: Arbitrary file upload via deserialization

🎯 Affected products1

Red Hat JBoss Portal Platform 6.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up all applications deployed on Red Hat JBoss Portal, along with all customized configuration files, and any databases and database settings. Note that it is recommended to halt the Red Hat JBoss Portal server by stopping the JBoss Application Server process before installing this update, and then after installing the update, restart the Red Hat JBoss Portal server by starting the JBoss Application Server process.

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2013:1265
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=securityPatches&product=jbportal&version=6.0.0
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=974813
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1265.json