Lucene search

K
redhatRedHatRHSA-2020:4401
HistoryOct 28, 2020 - 9:00 p.m.

(RHSA-2020:4401) Important: Red Hat JBoss Enterprise Application Platform 7.3 security update

2020-10-2821:00:43
access.redhat.com
49

0.004 Low

EPSS

Percentile

72.5%

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime.

This asynchronous patch is a security update for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8.

Security Fix(es):

  • jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (CVE-2020-25649)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, see the CVE page(s) listed in the References section.