Red Hat Security Advisory: Red Hat JBoss Fuse 6.1.0 update
bouncycastle: TLS CBC padding timing attack HawtJNI: predictable temporary file name leading to local arbitrary code execution Java: XML signature spoofing hadoop: man-in-the-middle vulnerability Framework: XML External Entity (XXE) injection flaw Java: Java XML Signature DoS Attack Framework: XML External Entity (XXE) injection flaw Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream Framework: incomplete fix for CVE-2013-7315/CVE-2013-6429 Fuse: admin user cleartext password appears in logging Framework: cross-site scripting flaw when using Spring MVC CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens
cpe:/a:redhat:jboss_fuse:6.1.0