What is RHSA-2014:0045?

RHSA-2014:0045 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update

Which CVE IDs does RHSA-2014:0045 cover?

RHSA-2014:0045 covers the following CVE IDs: CVE-2013-6447, CVE-2013-6448. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:0045?

RHSA-2014:0045 affects 1 product, including: Red Hat JBoss Web Framework Kit 2.4.

RHSA-2014:0045Medium

Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update

Vendor

Red Hat Product Security

Published

January 20, 2014

Last Modified

January 28, 2026

🔗 CVE IDs covered (2)

CVE-2013-6447 →CVE-2013-6448 →

📋 Description

CVE-2013-6447 — Seam: XML eXternal Entity (XXE) flaw in remoting CVE-2013-6448 — Seam: Information disclosure in remoting

🎯 Affected products1

Red Hat JBoss Web Framework Kit 2.4

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying this update, back up your existing installation of Red Hat JBoss Web Framework Kit. The JBoss server process must be restarted for this update to take effect.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2014:0045
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=web.framework.kit&downloadType=securityPatches&version=2.4.0
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1044784
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1044794
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0045.json