RHSA-2014:0452High

Red Hat Security Advisory: Fuse ESB Enterprise/Fuse MQ Enterprise 7.1.0 update

Published
April 30, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (5)

CVE-2013-6440 →CVE-2013-7285 →CVE-2014-0002 →CVE-2014-0003 →CVE-2014-0050 →

📋 Description

CVE-2013-6440 — Java: XML eXternal Entity (XXE) flaw in ParserPool and Decrypter CVE-2013-7285 — XStream: remote code execution due to insecure XML deserialization CVE-2014-0002 — Camel: XML eXternal Entity (XXE) flaw in XSLT component CVE-2014-0003 — Camel: remote code execution via XSL CVE-2014-0050 — apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream

🎯 Affected products3

  • Fuse ESB Enterprise 7.1.0
  • Fuse MQ Enterprise 7.1.0
  • Fuse Management Console 7.1.0

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update).

🔗 References (10)