RHSA-2019:0365MediumCVSS 5.4

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 security update

Published
February 18, 2019
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2018-10934 →CVE-2018-14642 →CVE-2018-1000632 →

📋 Description

CVE-2018-10934 — wildfly-core: Cross-site scripting (XSS) in JBoss Management Console CVE-2018-14642 — undertow: Infoleak in some circumstances where Undertow can serve data from a random buffer CVE-2018-1000632 — dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

🎯 Affected products102

  • Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-0:1.5.5.015-1.redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-cli-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-commons-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-core-client-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-dto-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-hornetq-protocol-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-hqclient-protocol-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-jdbc-store-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-jms-client-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-jms-server-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-journal-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-native-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-ra-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-selector-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-server-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-activemq-artemis-service-extensions-0:1.5.5.015-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-apache-cxf-0:3.1.16-2.redhat_2.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-apache-cxf-0:3.1.16-2.redhat_2.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-apache-cxf-rt-0:3.1.16-2.redhat_2.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-apache-cxf-services-0:3.1.16-2.redhat_2.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-apache-cxf-tools-0:3.1.16-2.redhat_2.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-dom4j-0:2.1.1-1.redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-dom4j-0:2.1.1-1.redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-hibernate-0:5.1.17-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-hibernate-0:5.1.17-1.Final_redhat_00001.1.ep7.el7.src as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-hibernate-core-0:5.1.17-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-hibernate-entitymanager-0:5.1.17-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • eap7-hibernate-envers-0:5.1.17-1.Final_redhat_00001.1.ep7.el7.noarch as a component of Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server
  • +72 more not shown

✅ Remediation

For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (28)