What is RHSA-2014:0195?

RHSA-2014:0195 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat JBoss Portal 6.1.1 update

Which CVE IDs does RHSA-2014:0195 cover?

RHSA-2014:0195 covers the following CVE IDs: CVE-2013-4517, CVE-2013-6440. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by RHSA-2014:0195?

RHSA-2014:0195 affects 1 product, including: Red Hat JBoss Portal Platform 6.1.

RHSA-2014:0195Medium

Red Hat Security Advisory: Red Hat JBoss Portal 6.1.1 update

Vendor

Red Hat Product Security

Published

February 20, 2014

Last Modified

November 7, 2026

🔗 CVE IDs covered (2)

CVE-2013-4517 →CVE-2013-6440 →

📋 Description

CVE-2013-4517 — Java: Java XML Signature DoS Attack CVE-2013-6440 — Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter

🎯 Affected products1

Red Hat JBoss Portal Platform 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up all applications deployed on JBoss Enterprise Portal Platform, along with all customized configuration files, and any databases and database settings.

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2014:0195
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jbportal&downloadType=distributions
externalhttps://access.redhat.com/site/documentation/en-US/Red_Hat_JBoss_Portal/
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1043332
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1045257
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0195.json